Endpoint Encryption

 View Only
  • 1.  Migration of laptop assets from truecrypt to WDE

    Posted Aug 19, 2014 08:20 AM

    we have been given direction to migrate all assets installed with truecrypt to PGP WDE/Symantec Disk Encryption.

    The logistics of this is daunting and I was curious if there is a way to do this without having all the remote laptop users send their laptops into the corporate IT staff to perform this operation?

    How have any other teams done a mass migration like this?

    nearly 1000 users are remote and on laptops, they are currently installed with Truecrypt

    The process suggests that the users will be without their laptop for a minimum of three days, most likely four to five

    Not to mention the cost associated with 1 or 2 day shipping for 1000 laptops

     

    1) ship laptop in (1-2 days)

    2) decrypt drive and uninstall truecrypt (6-8 hours)

    3) install Symantec Encryption Desktop (30-45 mins)

    4) encrypt Drive (6-8 hours)

    5) Ship asset back to user (1-2 days)

     

    Any thoughts greatly appreciated.



  • 2.  RE: Migration of laptop assets from truecrypt to WDE

    Posted Aug 19, 2014 09:29 AM

    Thank you for issue description.

    Looking at the Environment as you have explained , it could be a little tiresome and lengthy, but the Migration process unfortunately has to go thorugh the process of Decryption and Reinstallation of PGP WDE.

     



  • 3.  RE: Migration of laptop assets from truecrypt to WDE

    Posted Aug 19, 2014 11:43 AM

    There's very little you can do really to expidite the process.  It has to be decrypted, and it has to be encrypted, there's no avoiding it.  You could do it remotely, but you could team it with some sort of patching cycle with these remote assets to do other things do them whilst your techies have hold of them.

     



  • 4.  RE: Migration of laptop assets from truecrypt to WDE

    Posted Aug 19, 2014 01:16 PM

    I think it is going to depend on just how much trust is placed in those remote users to follow a process (decrypt, uninstall TrueCrypt, install Symantec Encryption Desktop, encrypt the drive), whether or not they have admin rights on their systems, and if they are logging onto a domain via VPN.

    If they are not tech savvy enough to perform the decryption, uninstallation, installation and encryption, or if a security policy states that the systems must be 100% encrypted before the end users receive them, then you probably do not have any other options than to have the systems sent in.

    It would probably help quite a bit if we knew a little more about the security requirements for those users.



  • 5.  RE: Migration of laptop assets from truecrypt to WDE

    Posted Aug 19, 2014 01:24 PM

    Let me add some clarification, I don't see anyway to have the users do their own migration, nor a way to streamline the actual steps required to peform the migration.  I was curious if there were/are resources available to assist in the actual project, IE does Symantec offery any professional services, know of a vendor, have any tools that would make this easier to pull off.



  • 6.  RE: Migration of laptop assets from truecrypt to WDE
    Best Answer

    Posted Aug 20, 2014 04:07 AM

    Symantec has a huge partner network.  It's a question of whether you think a consultant is appropriate for such services.  Sounds like you need an IT transformation organisation rather than any professional services from Symantec.

     

    But if you're after a Symantec certified partner, you can locate one near you through this site:

    http://partnerlocator.symantec.com/