HomeEncryption ProductsSafeGuard EasyProduct Features

SafeGuard® Easy features

Why encrypt with SafeGuard© Easy?

Data is one of the most valuable assets that companies and organizations have. These assets are in even more danger since “mobile computing” has become a reality: sensitive information is stored on notebooks and removable media – without any firewall protection. Mobile devices and media, along with the sensitive and valuable information that is stored on them, are constantly exposed to loss or theft. A company’s management team is responsible for taking all appropriate steps to protect a company’s or organization’s data.

SafeGuard Easy provides this protection: No unauthorized user may access the device and read data or use the device as a tool to enter the company network. If a device gets into unauthorized hands the data is securely protected even if the hard disk is removed. Complete encryption of the entire hard disk and a user authentication procedure that runs before the operating system boots provide secure protection.

Whether a single laptop or 10,000 PCs are to be protected, SafeGuard Easy allows easy implementation and enforcement of the IT security policy. SafeGuard Easy is truly user-proof. It operates transparently in the background, so end users don’t have to undergo training or alter their work behaviours. For security officers, IT managers, and system administrators, SafeGuard Easy offers transparent security, easy security policy implementation, and simple deployment.

In a world where laptops and desktop PCs are lost every day and hackers attack corporate secrets every hour, SafeGuard Easy is a business necessity.

Benefits

Enhanced security

• Perfect protection of PCs and notebooks against unauthorized access
• Perfect protection of data on hard disk and removable media against unauthorized access
• No additional cost for data erasing or hard disk destruction in case of sale, disposal, or return of leased devices as data is securely encrypted
• Easy enforcement of a company-wide security policy
• Smooth integration in existing IT security environment, e.g. cryptographic token, TPM Chip
• Secure protection in each power mode including hibernation and stand-by
• Certified according Common Criteria EAL3 and FIPS 140-2* Easy to deploy

Easy to deploy

• Easy roll-out via network without end-user involvement
• Easy administration from central console
• Reduced help-desk workload through simple reset of forgotten passwords
• Interoperable with Lenovo's TVTs Rescue and Recovery™ as well as CSS and Computrace

Easy to use

• Fully automated encryption in the background - no change of working behavior, no user training
• Proven security solution – more than 2 million laptops and PCs worldwide are SafeGuard Easy protected

Key Features/Functionality

Security

• Pre-boot authentication using password or eToken; optionally applicable on up to eight OS partitions
  • Organization-specific password rules
  • Optional eToken authentication
• Comprehensive encryption capabilities
  • Full or partial hard-disk encryption, independent of file system (e.g., NTFS, FAT)
  • External media encryption (e.g., floppy disks, Zip and Jaz drives, USB memory sticks)
• Sophisticated and efficient encryption algorithms
  • AES (256 and 128 bit), IDEA (128 bit) and others
• Secure key management: Enciphering key dynamically generated from the password entered – not stored on disk
• Secure hibernation
  • Encryption of “Suspend to Disk” mode (hibernation image)
  • Authentication after resuming
• Use of TPM chip for encryption key generation and authentication procedure (e.g., IBM ESS support)
• Integrated Boot Manager to support multiple operating systems and/or partitions on the same device

System administration

• Windows MSI-based installation
• Optional central administration console
  • Queuing and distribution of configuration files to clients
  • Central collection of client settings
• Remote management console for quick and effective administrative client support
• Scripting interface for automating administrative tasks
• Pre-boot event logging
• Secure Wake on LAN

Ease of use

• Single Sign-On to the operating system
• Automated encryption without user intervention
• Efficient algorithms with negligible (and at times improved) performance impact
• Secure and powerful challenge/response procedure to reset forgotten passwords without needing to be online

System Requirements

Hardware

• PC with Intel Pentium or similar
• Minimum 25MB free hard-disk space

Operating System

• Microsoft Windows XP/2000
• Microsoft Windows 2003 Server Standard Edition
• Microsoft SQL Server 8.0 (SP3) for central administration (optional)
• Older systems are supported via prior versions

Network

• All Microsoft-supported networks

Certifications

• Common Criteria EAL3
• FIPS 140-2 (cryptographic library under evaluation)
• Aladdin eToken enabled

Complementary SafeGuard® products

• SafeGuard® Advanced Security modules as add-ons to support other smartcards, central auditing, Multi-Desktop, SSO, PnP management, Application Specific Access Rights etc.
• SafeGuard® LAN Crypt for workgroup based file/folder encryption.
• SafeGuard® Easy remote console for Challenge / Response Helpdesk, with CryptoServer 2000 Hardware Security Module.
• Plug-in for Aladdin Token Management System (TMS)

Interoperability

• Certified compatible with Lenovo Rescue and Recovery™ (RnR) allows RnR to backup and restore data to SGE encrypted hard disks (even a complete restore of the operating system)
• Compatible with Computrace to locate stolen notebooks (new Computrace version required)
• SafeGuard Easy is compatible with all leading software distribution tools
• Aladdin eToken PRO (32KB, 64KB or NG OTP) for pre-boot authentication
• Integration of other smartcards via PKCS#11 (additional SafeGuard Advanced Security module required)
• VOICE.TRUST server for automated biometric challenge/response helpdesk Interfaces

Interfaces

• Scripting API to automate repetitive administration tasks

Standards/Protocols

• PKCS#11, AES (256 and 128 bit), Rijndael (256 bit), IDEA (128 bit), DES (56 bit), 3DES (168 bit), Blowfish-8/16 (256 bit), Stealth-40 (40 bit)

Language Versions

• English, German, French

Read more about the detailed features of SafeGuard® Easy in our PDF color brochure (pdf). For a more technical description of SafeGuard Easy's features, see the SafeGuard® Easy white paper or the SafeGuard® Easy owner's manual.