DISK Protect: Full Disk Encryption

Secure your data wherever it travels with full disk encryption

An assured full disk encryption solution securing data on desktop and laptop PCs from theft and loss
Becrypt DISK Protect full disk encryption is Becrypt’s Data at Rest solution, designed to secure an organisation’s data, whether on desktop or laptop PCs. With greater and greater amounts of data being stored on PCs, the risk and the impact of data loss is also increasing. DISK Protect ensures that all data is safely encrypted, with no changes in performance or in the user's working practices.

Becrypt DISK Protect Overview
DISK Protect full disk encryption gives you complete peace of mind that the data held on laptops and PCs is fully protected in the event of loss or theft. Our full disk encryption solution transparently encrypts the hard drive with no impact on performance and prevents unauthorised access by strong user authentication. Even if the PC is disposed of, and specialist recovery tools are used to recover the data, full disk encryption insures data remains safe. DISK Protect disk encryption can also encrypt the data on removable media such as Firewire, USB devices, SD cards, other mass storage devices, and local disks.

DISK Protect disk encryption is engineered to be easy to deploy and manage, and provides full disk encryption with no disruption to users' working practices. When combined with Becrypt Enterprise Manager, DISK Protect can be deployed throughout an organisation with little or no disruption to business activities. The full disk encryption package can be deployed to thousands of users in the organisation quickly; laptops and PCs can be secured within hours.

DISK Protect full disk encryption is tailored to meet the needs of your organisation

DISK Protect

The commercially available version of DISK Protect full disk encryption and has been awarded the CSIA Claims Tested Mark.

Features: Benefits:
Centralised management provides enterprise level control and management over all disk encryption protected machines. Easy to manage any machines on the network with no disruption to users.
Disk encryption overhead is minimal and happens in the background transparently without any disruption to business activities. Easy to use - Users can detect no noticeable performance changes
Data is encrypted automatically Easy to use - users do not have to remember to enable disk encryption, nor have to wait for encryption to complete before closing down their machine
Single sign on simplifies log in  Flexible for users – they do not need multiple passwords and secure access allowed in the event that a password is forgotten
Secure hibernation All data is protected when the machine goes into hibernation
Secure wipe for decommissioning machines Ensures data is indecipherable when the PC is reassigned
Removable media protection Secures data on removable media such as USB connected storage devices and disks by encryption and password protection.
Multiple users can be added onto a single PC Allows the secure sharing of resources and aids organisational flexibility.


DISK Protect Baseline

CAPS-approved to Baseline and reduces the protective marking of Restricted data by one level or, when used to enforce dual-factor authentication, reduces the protective marking of Confidential data by one level.

Features: Benefits:
Centralised management provides enterprise level control and management over all disk encryption protected machines. Easy to manage any machines on the network with no disruption to users.
Disk encryption overhead is minimal and happens in the background transparently without any disruption to business activities. Easy to use - Users can detect no noticeable performance changes
Data is encrypted automatically Easy to use - users do not have to remember to enable disk encryption, nor have to wait for encryption to complete before closing down their machine
Single sign on allows integration to desktop and device recovery Flexible for users – they do not need multiple passwords and secure access allowed in the event that a password is forgotten
Secure hibernation All data is protected when the machine goes into hibernation
Secure wipe for decommissioning machines Ensures data on disk encryption machine is indecipherable when the PC is reassigned
Removable media protection Secures data on removable media such as USB connected storage devices and disks that can be password protected.
Multiple users can be added onto a single PC Allows the secure sharing of resources and aids organisational flexibility.

DISK Protect Enhanced

CAPS-approved to Enhanced Grade and reduces the protective marking of Confidential data by two levels.

DISK Protect Removable Media Encryption may be purchased and installed as a separate module (if full disk encryption is not required). This option encrypts the data written to removable media and may either employ a personal Encryption Key or a shared Encryption Key (allowing authorised users to exchange protected data).

Features / Benefits

Features: Benefits:
Centralised management provides enterprise level control and management over all disk encryption protected machines. Easy to manage any machines on the network with no disruption to users.
Disk encryption overhead is minimal and happens in the background transparently without any disruption to business activities. Easy to use - Users can detect no noticeable performance changes
Data is encrypted automatically Easy to use - users do not have to remember to enable disk encryption, nor have to wait for encryption to complete before closing down their machine
Single sign on allows integration to desktop and device recovery Flexible for users – they do not need multiple passwords and secure access allowed in the event that a password is forgotten
Secure hibernation All data is protected when the machine goes into hibernation
Secure wipe for decommissioning machines Ensures data on disk encryption machine is indecipherable when the PC is reassigned
Removable media protection Secures data on removable media such as USB connected storage devices and disks that can be password protected.
Multiple users can be added onto a single PC Allows the secure sharing of resources and aids organisational flexibility.

How it works

Becrypt DISK Protect full disk encryption works by encrypting every section of the hard drive, preventing unauthorised access to anyone accessing the files without permission. DISK Protect disk encryption provides strong authentication to load the operating system and access user files and it will allow users to protect their existing and any new data without causing any impact on day to day operations.

The product can be installed at any time, and will encrypt data while the user works through disk encrytion. Once installed, all read/write requests are decrypted/encrypted on the fly without user interaction, allowing users to continue to use the system as normal. Enterprise management software allows disk encryption recovery data and audit logs to be recorded centrally, while the deployment can take place with no user interaction required, preventing any down time of equipment.

Certification

DISK Protect: CCTM, FIPS 140-2 Level 1

DISK Protect Baseline: CESG CAPS approved to CONFIDENTIAL (Impact Level 4).

DISK Protect Enhanced: CESG CAPS approved to Enhanced grade.