FinallySecure Enterprise is the logical combination of the vendor's FinallySecure Home and SECUDE secure notebook products. It is a centrally manageable full disk encryption product with support for both software (as in secure notebook) or hardware (disk-drive) based encryption methods. SECUDE International targets the products to organizations with an eye to eventually migrate their hard drive encryption policies to hardware-based algorithms, and initially supports Windows XP machines with Seagate Momentus FDE drives.

A full drive encryption product, FinallySecure encrypts all portions of the drive--including all operating system data--using AES-128 (hardware) or AES-256 (software) based encryption. Pre-Boot authentication features enable the machine to boot first into a specialized, hardened Linux-based partition, which prompts the user for their login credentials. The same credentials are used both for the pre-boot authentication and Windows, enabling single-sign-on between the hard drive and the OS. Smart card-based authentication is also supported.

With hardware encryption, the encryption key is stored directly in a secure area of the hard drive itself and does not leave the hard drive during encryption/decryption operations (which occur transparently to the user); i.e., the key does not need to be copied into computer memory. Software-based encryption, on the other hand, enables the protection of data on a partition-by-partition basis; not available with hardware-based encryption. Both forms of encryption enable the "erasure" of data by simply deleting the encryption key, making the data stored on the drive inaccessible.

Enterprise features of the product include support for central management and auditing, including centrally managed password changes.

Contact the vendor for further information.