The Ultimate PC security solution – whether in the office or on the move

Data is one of the most valuable assets that companies and organizations have. These assets are in even more danger since “mobile computing“ has become a reality: sensitive information is stored on notebooks and removable media – without any firewall protection. Mobile devices and media, along with the sensitive and valuable information that is stored on them, are constantly exposed to loss or theft. A company's management team is responsible for taking all appropriate steps to protect a company's or organization's data.

SafeGuard Easy provides this protection: No unauthorized user may access the device and read data or use the device as a tool to enter the company network. If a device gets into unauthorized hands the data is securely protected even if the hard disk is removed. Complete encryption of the entire hard disk and a user authentication procedure that runs before the operating system boots provide secure protection.

Whether a single laptop or 10,000 PCs are to be protected, SafeGuard Easy allows easy implementation and enforcement of the IT security policy. SafeGuard Easy is truly user-proof. It operates transparently in the background, so end users don't have to undergo training or alter their work behaviours. For security officers, IT managers, and system administrators, SafeGuard Easy offers transparent security, easy security policy implementation, and simple deployment.

In a world where laptops and desktop PCs are lost every day and hackers attack corporate secrets every hour, SafeGuard Easy is a business necessity.

Key FEATUREs and functionality

1. Pre-boot authentication using password or eToken, optionally applicable on up to eight OS partitions
          - Organization specific password rules.
          - Optional eToken authentication.
2. Comprehensive encryption capabilities
          - Full or partial hard disk encryption, independent of file system (e.g. NTFS, FAT).
          - External media encryption (e.g. diskettes, ZIP and JAZ disks, USB memory sticks).
3. Sophisticated and efficient encryption algorithms
          - AES (256 and 128 bit), IDEA (128 bit) and others.
4. Secure key management: Enciphering key dynamicall generated from the password entered not stored on disk.
5. Secure hibernation
          - VEncryption of “Suspend to Disk” mode (hibernation image)
          - Authentication after resume
          -  Use of TPM chip for encryption key generation and   authentication procedure (e.g. IBM ESS support)
6. Integrated Boot Manager to support multiple operating systems and/or secured/unsecured
   partitions on the same device.

 System Administration

1. Windows Installer (MSI) based installation
2. Optional central administration console
         - Queuing and distribution of configuration files to clients
         - Central collection of client settings
3. Remote management console for remote client management
4. Scripting interface for automating administrative tasks
5. Pre-boot event logging
6. Secure Wake on LAN

 Ease Of Use

1. Single Sign On to the operating system.
2. Automated encryption without user intervention.
3. Efficient algorithms – negligible performance impact t
4. Secure and powerful challenge/response procedure to reset forgotten passwords without the need for on-line connection

System Requirements

Hardware
   - PC with Intel Pentium or similar
   - Minimum 25MB free hard disk space
Operating System
   - Microsoft Windows XP / 2000
   - Microsoft Windows 2003 Server Standard Edition
Network
   - All Microsoft-supported networks.

Certificates

   - Common Criteria EAL1/EAL3
   - FIPS 140-2 (currently under evaluation)
   - Aladdin eToken enabled

Complementary SafeGuard® products

   - SafeGuard Advanced Security modules as add-ons to support other smartcards, central auditing
     Multi-Desktop, SSO, PnP management, Application Specific Access Rights etc
   - SafeGuard® LAN Crypt for workgroup based file/folder encryption.
   - SSafeGuard Easy Web Console for Challenge /Response Helpdesk, with CryptoServer 2000 Hardware Security Module.

Interoperability

   - SafeGuard Easy is compatible with all leading software distribution tools
   - Aladdin eToken PRO for pre-boot authentication
   - Integration of other smartcards via PKCS#11(additional SafeGuard Advanced Security module required)
   - VOICE.TRUST server for automated biometric challenge/ response helpdesk

Interfaces

    - Scripting API to automate repetitive administration tasks

standards/protocols

    - PKCS#11, AES (256 and 128 bit), Rijndael (256 bit), IDEA (128 bit),DES (56 bit), Blowfish-8/16 (256 bit), Stealth-40 (40 bit)

Languages

    - English, German, French

To request information on the Utimaco Safe Guard Easy or any other product please click the Information Request menu item.