Sophos SafeGuard Device Encryption
Encryption of laptops, desktops and removable media

Features:

Secure your data with strong, transparent encryption

Get the industry-certified encryption that's already protecting millions.

• Performs full hard-disk encryption ÌÌ Uses strong, standardized encryption algorithms that are secure and fast—now up to 30% faster
• Allows only authorized users and administrators to read encrypted data, even if hard drives are removed from PCs
• Uses encrypted hibernation to keep data protected at all times
• Offers a fast-initial encryption option that encrypts only the parts of your hard drive in use, reducing the time needed to encrypt and letting your users get to work faster
• Makes use of technology in the latest i5 and i7 processors, so encrypted computers perform better

Get secure pre-boot authentication

We keep your data safe from the moment anyone boots up your PCs.

• Enables pre-boot user authentication using a password, cryptographic token or smartcard, biometrics single sign-on (SSO) or key ring
• Provides single sign-on for both encryption and operating system so your users have to remember only one login
• Lets you use policy updates to add and remove users before starting the operating system
• Enforces the consistent password rules you set for your organization
• Uses a secure log-on process to block password attacks
• Provides service accounts so administrators can securely access PCs to perform required maintenance

Make password recovery quick and safe

Our secure password and data recovery helps you and your users stay productive.

• Recovers broken operating system configurations on encrypted disks using the external boot option with Windows PE.
• Enables emergency data access and recovery—automated key reassignments allow secure and quick access to encrypted disks on other systems.
• Integrates with Lenovo Rescue and Recovery to securely recover encrypted operating systems and data.

Save time with central administration

Use SafeGuard Management Center to install and manage device encryption across your entire network.

• Centrally enforces encryption policies.
• Provides audit logs and reports for documenting compliance with internal policies and external regulations.
• Centralizes key management for data recovery and sharing.
• Easily imports user and computer information using Microsoft Active Directory.
• Automates administrative activities, such as patch management, with Secure Wake-On-LAN.
• Blocks or locks down devices that haven't recently talked to the Management Center, in case they might be lost or stolen.
• Lets you use Microsoft Standard Installation packages for central, unattended installation.

Specifications:

Operating systems

• Microsoft Windows 7 (32 and 64 bit)
• Microsoft Windows Vista (32 and 64 bit; SP 1, SP 2)
• Microsoft Windows XP (32 bit; SP 2, SP 3)

Certifications

• Uses FIPS 140-2 validated cryptography
• Common Criteria EAL-3+
• Aladdin eToken enabled

Standards and protocols

• Symmetrical encryption: AES 128/256 bit
• Asymmetrical encryption: RSA
• Hash functions: SHA-256, SHA-512
• Password hashing: PKCS #5, PKCS #12
• Smartcard/token: PKCS #15, PKCS #11, Microsoft Cryptographic Service Provider (CSP), PC/SC, Kerberos
• PKI: PKCS #7, PKCS #12, X.509 certificates
• AES.NI hardware support

Languages supported

English, French, German, Italian, Japanese and Spanish; Unicode-based support for other languages

Documentation:

Download the Sophos SafeGuard Enterprise Data Sheet (PDF).

Download the Sophos SafeGuard Device Encryption Data Sheet (PDF).