Anyone very familia...
 

MegaSack DRAW - This year's winner is user - rgwb
We will be in touch

[Closed] Anyone very familiar with PGP whole disk encryption?

16 Posts
4 Users
0 Reactions
51 Views
Posts: 91097
Free Member
Topic starter
 

I've got a second SATA drive plugged into the internal drive bay, and I've got two partitions on it. Both seem to work fine. PGP however won't recognise the individual partitions, and I only want to encrypt one of them.

Only the second one has a drive letter (Windows 7 btw)


 
Posted : 02/11/2013 11:09 am
Posts: 0
Free Member
 

Doesn't Windows 7 come with Bitlocker whole disk encryption as standard?

Rachel


 
Posted : 02/11/2013 11:20 am
Posts: 91097
Free Member
Topic starter
 

Yeah, but my company doesn't 🙁


 
Posted : 02/11/2013 11:22 am
Posts: 0
Free Member
 

This isn't your computer?

In that case, I'm not sure you should be installing your own software on it...


 
Posted : 02/11/2013 11:27 am
Posts: 91097
Free Member
Topic starter
 

Not my computer, but it is my disk, onto which I am installing software 🙂

Company policy is quite liberal, provided you follow the security policy which includes installing PGP WDE.

I think I have figured it out anyway - I formatted the second disk with GPT instead of MBR.


 
Posted : 02/11/2013 11:29 am
Posts: 0
Free Member
 

bitlocker only available on win7 enterprise edition AFAIR.


 
Posted : 02/11/2013 11:34 am
Posts: 91097
Free Member
Topic starter
 

Still doesn't work. Lets me select the partition, and encryption starts then stops immediately. No errors in the log, none in the system log, nothing.

PGP is a shoddy piece of software.


 
Posted : 02/11/2013 4:09 pm
Posts: 2
Free Member
 

Yes, I'm very familiar with it.
What version do you have on the device? It is a laptop?

Are you actually on the domain when you're starting the encryption?


 
Posted : 02/11/2013 5:48 pm
Posts: 91097
Free Member
Topic starter
 

Laptop, version 10.2.1. I already have the main drive (2 partitions) encrypted. I thought I'd be able to encrypt a partition on the second one with the credentials from the main drive but leave the master boot record alone, so then I could select to boot from a bootable partition on the second drive and start another OS without PGP on it.

And yes I'm connected to the VPN. I don't get any error message, nothing in the log, nothing in the System log either.


 
Posted : 02/11/2013 6:14 pm
Posts: 2
Free Member
 

You've not made the disk a dynamic one have you? It needs to be basic.

So you're trying to create a second disk with two partitions, one with windows which will be encrypted and one with some else that won't? Correct?

That should be possible in theory.


 
Posted : 02/11/2013 8:39 pm
Posts: 91097
Free Member
Topic starter
 

I don't know what a dynamic disk is 🙂 I just converted it to an MBR disk and then created two partitions.

Correct?

Almost. I want one bootable *without* PGP, and the other one to be encrypted. I wouldn't mind all that much though if the bootable one had to be encrypted, but I think that might cause problems as PGP is set up to use Windows authentication, so if the other OS wasn't windows or had a different password it could get tricky...


 
Posted : 02/11/2013 8:48 pm
Posts: 2
Free Member
 

You can only encrypt supported partitions like XP, Vista and the like. :Linux can't be encrypted but leaving it unencrypted as a bootable partition should be fine.

It's very unlikely you've made it a dynamic disk because basic is the default but windows can decide to do it for you sometimes especially if there's some corporate involvement.

At the moment, this would be my most likely area of suspicion.
Go through the process and see if that helps.
[url] http://technet.microsoft.com/en-us/library/cc755238.aspx [/url]


 
Posted : 02/11/2013 10:17 pm
Posts: 91097
Free Member
Topic starter
 

I appreciate the help samuri, I'll take a look when I get back from Ikea..!

Although the laptop is standard W7, not a corporate build, so it should behave in the default manner.


 
Posted : 03/11/2013 9:13 am
Posts: 91097
Free Member
Topic starter
 

Pfft. It already is a basic volume.


 
Posted : 04/11/2013 9:20 am
Posts: 2
Free Member
 

Ok, let me try something at work tomorrow.


 
Posted : 04/11/2013 6:11 pm
Posts: 91097
Free Member
Topic starter
 

Ta.

No-one replied to my Symantec support thread yet.


 
Posted : 04/11/2013 6:40 pm
Posts: 2
Free Member
 

Bit of messing around at work and we did it OK following the process below.

Create two partitions on clean disk, format one to windows, PGP encrypt it.
Then do stuff with the other partition.

Have you tried starting from scratch and getting the windows partition all sorted before you do anything with the other?


 
Posted : 06/11/2013 7:07 pm