Download Wave BitLocker Manager

Transcript
Wave for BitLocker® Management
Automated Policy Management for Microsoft® BitLocker Encryption
WaveforBitLockerManagement
Key Benefits:
33 Simpliesdeploymentandongoing
managementbyeliminatingtheburdenof
writingandmaintainingcustomscripts
®
MicrosoftWindows
7comeswithanembeddedsoftware
encryptionapplicationcalledBitLocker.Unlikeotherstan
alonesoftware-basedfulldiskencryption(FDE)applications,
thetightplatformintegrationofBitLockeranditsuseofth
33 Reducescostswiththeadditionof
centralizedcontrolforactivation,
deployment and on-going management
TrustedPlatformModule(TPM),anembeddedsecuritychipin
33 Increasessecuritywiththeadditionof
centralizedpolicyenforcement,protected
recoverycredentialsandsupervisionof
theTrustedPlatformModule(TPM)
WaveforBitLockerManagementprovidesacomprehensivesetof
33 Addsanauthorityofproofthatdata
isprotectedintheeventofalostor
stolen PC
BitLockerManagementeliminatesthecostandcomplexity
virtuallyallPCs,makesitagoodstartingpointfordata-at-re
protectionfororganizationsmovingtoWin7.
toolstoautomateandsecurethecongurationandadministra
ofMicrosoftBitLocker.Wave’ssoftwareorganizesthecoreMicrosoft
capabilities into a simple and intuitive administrative application
forsettingupandmaintainingBitLockerclients.Wavefor
associatedwithcreatingcustomscriptsandActiveDirecto
schemaextensions,associatedwithBitLocker.Inaddition,Wave’s
softwareprovidesamoresecureBitLockerenvironmentthrou
theautomationoftheTrustedPlatformModuleTPM)
( for
,
strong
keyprotection,theencryptionofBitLockerrecoverypassword
andthemonitoringofBitLockerclientcongurationsetting
Centralized Encryption Management
Manageability and Control
Organizations, both large and small, understand that
WaveforBitLockerManagementprovidesafullsetofcapabilitie
centralized encryption management is a critical component
toremotelysearchfor,initialize,congureandadministeragloba
totheirsecurityarchitecture.Wave’ssoftwareprovidesthe
deploymentofBitLockerclients.Throughnativeintegrationw
policy-based access controls, comprehensive reporting,
MicrosoftActiveDirectoryandtheuseofWindowsGroupPolicy
directory services integration, centralized control and end-user
Objects(GPO),assigningusersandassociatedpoliciescanbe
access recovery. Companies require these capabilities to cost
performedwithinthedirectoryframework—dramaticallysimplifyin
eectivelyimplementandmanagedataencryptionand,most
deployment,thusacceleratingtheuseofBitLockerencryptio
importantly, prove that data is protected in the event that a
computer (or its hard drive) is lost or stolen.
MicrosoftManagementConsole(MMC)snap-inprovides
•
both single user and group level control
FullycompatiblewithWindowsManagement
•
Instrumentation(WMI)
Delegatedrole-basedadministrationwithpre-dened
•
tasksforEnrollmentAgent,HelpDesk,SecurityOcer
andSystemAdministrator
Simplifying Encryption and Authentication
•
Supportfornon-domaincomputers
•
AutomatesTPMownershipandcontrolforgreatersecurit
AccessRecoveryandtheHelpDesk
AuditingandReporting
WaveforBitLockerManagementreducestheoperational
WaveforBitLockerManagementcomeswithastandardset
costsassociatedwithBitLockerbyprovidingcentralized
ofactivityreportsthatcanbeusedtoprovidethestatusof
accessrecoveryandrole-basedHelpDeskfunctions.Using
yourenterprise-wideBitLockerinstallation.Inadditionto
TPM-basedaccesscontrolsimprovesthesecurityBitLocker
staticreports,WaveforBitLockerManagementalsogenerates
provides and in doing so binds the hard drive to a particular
PC.WaveforBitLockerManagementprovidesremotereset
detailedserverlogsofallBitLockereventsonapermachine
basis.Theselogsincludeareal-timeviewofwhenBitLocker
andre-provisioningofTPM-basedaccesscredentialswithout isinitialized,lockedandunlockedandwhenaccesspasswords
requiring the drive contents to be decrypted and subsequently
andrecoverykeysarecreatedorchanged.WaveforBitLocker
re-encrypted.Thisfacilitatesasmoothmigrationofadrive
activitycoverykeysarecreatedorchanged.WaveforBitLocker
fromonePCtoanotherintheeventofhardwarefailureand,
activitycoverykeysarecreatedorchanged.WaveforBitLocker
inaddition,providesaccessrecoveryforuserswhohave
activitycoverykeysarecreatedorchanged.WaveforBitLocker
forgottentheirTPMPIN.
activitycoverykeysarecreatedorchanged.WaveforBitLocker
Theuseof“roles”allowsorganizationstheabilitytodene
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
anddelegatetaskswithingroups,whilefunctioningacross activitycoverykeysarecreatedorchanged.WaveforBitLocker
theorganization—o-loadingnon-ITspecictasksto
activitycoverykeysarecreatedorchanged.WaveforBitLocker
otherindividuals,suchashelp-deskpersonnel.Wavefor
BitLockerManagementcanbeusedtomanageroledenitions,
taskdenitionsandroleassignments.Wave’spre-dened
browser-basedHelpDeskroleallowsfor:
DrivemigrationintheeventofadamagedPCmotherboard
•
•
Useraccessrecoveryinthecaseoflostorforgotten
•
ChangingaccessrightswhenaPCispassedfromone
•
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
access credentials
activitycoverykeysarecreatedorchanged.WaveforBitLocker
employee to another
activitycoverykeysarecreatedorchanged.WaveforBitLocker
internal policy
activitycoverykeysarecreatedorchanged.WaveforBitLocker
Periodically changing access credentials based on
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
03-28/version1.05
activitycoverykeysarecreatedorchanged.WaveforBitLocker
Copyright © 2010 Wave Systems Corp. All rights reserved.
activitycoverykeysarecreatedorchanged.WaveforBitLocker
Wave“Juggler”andEMBASSYlogoareregisteredtrademarksofWaveSystemsCorp.Allotherbrandsaretheproperty
oftheirrespectiveowners.DistributedbyWaveSystemsCorp.Specicationsaresubjecttochange
without
notice.
activity
covery
keysarecreatedorchanged.WaveforBitLocker
WaveSystemsCorp.
480PleasantStreet,Lee,MA01238
(87)2-WAVE•fax(413)2-05
www.wave.com
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreated
orchanged.
Wave
forBitLocker
Simplifying
Encryption
and Authentication
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
activitycoverykeysarecreatedorchanged.WaveforBitLocker
Related documents