SafeGuard EnterpriseEncryption

Hi thanks for that

Do I have to go through all this rigmarole just to encrypt 3 laptops??

Paul

Hi Paul - If you're just trialing the software, I would ask to have some licences for Sophos Central Device Encryption instead. This is the cloud hosted version so no servers to manage/configure on site - just point the clients at the cloud host.

You didn't say if you're getting more clients or if 3 is just the lot? Without meaning to undersell the product I would argue that having a "managed" solution to manage just three machines is a waste of time and I would do something cheaper and easier. If they're Windows machines it's a two second job to configure AD so that the recovery keys are pushed into that. There would be no cost to this - just a small amount of time.

If you need File Encryption instead of (or as well as) FDE (full-disk-encryption) then there's still some cheap tools you could use - depends entirely on if this is a test/concept or it's the full estate?

All the best 

Hi Michael,

Thanks for the reply, I have 3 Windows 7 Pro laptops that need encryption - I bought 3 Sophos Safeguard enterprise licences, whether that was a mistake or not I don't know.  I just need a bit locker type solution instead of installing management centres etc. but if that's what I have to do I'll do it.

Paul

Honestly if you bought 3 licences for just three PC's and it's now purchased....Ask Sophos (and your account manager if you have one) to transfer them to Central licences.

This "should" be free/cheap but would mean an ongoing cost.

However - If you want to write-off the purchase - You can configure AD (assuming these PC's are bound to a domain?) to store the keys and then assign permissions to your staff (?) to read the key from AD. Good article here - a little dated but still relevant.

http://jackstromberg.com/2015/02/tutorial-configuring-bitlocker-to-store-recovery-keys-in-active-directory/

You've bought a enterprise product I'm afraid Paul, and I feel that should have been explained to you/the purchaser. You've chosen a HUGE hammer to break just three nuts! It's a good product - I'm not knocking that, but I don't think a full-blown console and management is worthwhile for 3 PC's. The SSG setup can handle thousands of clients so you can appreciate it's quite a complex and chunky setup because it has to be. 

So I would personally - 1 - Transfer to cloud licences if possible. Make finance aware there will be an on-going cost.  or 2 - Sack it off, write off the expense already spent and use AD.

HTH

Hi Michael,

BitLocker isn't available for Windows 7 Pro though???  Would this still work with the AD thing???

Paul

Hi Michael,

BitLocker isn't available for Windows 7 Pro though???  Would this still work with the AD thing???

Paul