Anyone using SecureDoc Full-Disk Encryption for Mac from WinMagic?

Currently I am using Mac OS X v10.5 on a MBP and want to upgrade to Snow Leopard. I use PGP full disk encryption.

I do not want to wait anymore for PGP v10 before I can upgrade to Snow Leopard. In my search for a replacement for PGP I found SecureDoc Full-Disk Encryption for Mac from WinMagic.
https://www.winmagic.com/products/full-disk-encryption-for-mac

They claim to be Snow Leopard compatible
https://www.winmagic.com/kw/download.php?url=/datasheets/securedocmac_brochure20090925a.pdf

I have two questions:

1) Does anyone have experience with SecureDoc Full-Disk Encryption for Mac from WinMagic?

2) Where can I buy one? PGP has a store where I ordered my copy of the software. But I can't find a store anywhere for SecureDoc. With some trouble I found a reseller in the Netherlands, but they don't reply to any questions.

MacBookPro 15", Mac OS X (10.6)

Posted on Nov 13, 2009 2:48 AM

Reply
46 replies

Nov 13, 2009 2:57 AM in response to K T

Hi K T,

Thanks for replying. Yes I used the search. But it didn't help me. I only found iProd sync problems and information about harddrives with encryption support. I don't have questions about that.

I can't find much information about SecureDoc anywhere. Not here in the forums, which I use often to look for answers, or anywhere else. I can't even find a place to buy the software!

I suspect SecureDoc is enterprise software not intended for a single end customer. But still SecureDoc looks like a very good product for Snow Leopard full disk encryption. And I am looking for people who have experience with it, and perhaps even know where to buy it.

Nov 14, 2009 7:39 AM in response to idifix

I give up.

I find more and more articles who claim SecureDoc from WinMagic is expensive software for enterprise business only.

http://ibx.intel.com/directory/productpage/tabid/85/language/en-us/p-5298-secure doc-full-disk-encryption.aspx

Quote:
Key Business Segments:Enterprise
Supported Operating Systems: Snow Leopard

Its a shame, its the only Snow Leopard compatible full disk encryption software I know of.

Nov 14, 2009 3:30 PM in response to idifix

Hi,

Maybe <FileVault> (which is part of Leopard / Snow Leopard) could help you to protect your datas. The encryption scope is the user profile. For security purpose, TimeMachine don't backup files of a protected account (but it save the encrypted virtual disk if the user isn't logged).

Moreover, you can create hard disk encrypted image using Disk Utility. You can protect (encrypt) with a password.

Another solution is to use TrueCrypt ( http://www.truecrypt.org/) which is free, but the 2 solutions above should be enough 🙂.

Regards,
Didier

Nov 15, 2009 12:02 AM in response to Didier92

Hello Didier,

Before I bought PGP full disk encryption, I thought about FileVault. But it's just what you said. Using FileVault, TimeMachine only backups when the user is logged off. That's unacceptable for me. I love TimeMachine backing up all my files every two hours. I can't/want live without that. And with full disk encryption you know for sure all files that are accidentally outside of the user home dir are encrypted *** well.

Encrypted images are to much of a hassle for me. And not everything is encrypted.

I am the only user on the MBP anyway. Else FileVault would be a great solution.

Thanks for posting. But for me personally full disk encryption gives me the most easy of mind. For now I stick with PGP and Leopard. When PGP (FINALLY) releases version 10 (which requires big money again I presume) I switch to Snow Leopard.

Or I have to find some ChekPoint sollution.

Nov 16, 2009 2:14 AM in response to idifix

FYI: I found a website called: MySecureDoc.
http://www.mysecuredoc.com/product_info.asp

This site is from WinMagic and is old. It shows old products called MySecureDoc Personal Edition.

This is the only place I can find WinMagic software for the end-user. But WinMagic had this to say about the product:

Effective September 25, 2008 WinMagic will discontinue sales of the MySecureDoc Personal Edition product line including Media Edition, Personal Edition and Personal Edition Plus.

After this date, these products will no longer be available for sale. Current customers with active support will continue to receive support per their contracts but no new licenses will be sold for this product line.

We encourage you to learn more about WinMagic’s other product lines for disk encryption: SecureDoc™ and SecureDoc Enterprise ™ (www.winmagic.com).

We sincerely appreciate your support and regret any inconvenience this necessary action causes you.

Nov 28, 2009 9:36 AM in response to idifix

Hi idifix,

I've had a fairly lengthy discussion with the folks at WinMagic because I'm in exactly the same situation as you.

They do have a personal version (standalone) of SecureDoc for OSX and are about to bring out the FCS version for 10.6.2. I'm waiting impatiently for an evaluation to be released to me. I intend to try it as a software only version first and then, if it's good, try it out with the Seagate Momentus FDE drives. They assure me that it supports pre-boot password with an EFI (rather than a BIOS), which would be really cool.

My advice is to go to the WinMagic website and fill in a request for an eval. I was contacted by phone and email by a VP and several technical folks in additional to the sales guy. Very impressed so far.

They have pointed out that although they work with Seagate drives, they don't sell them. The list price is $155(€124) per seat up to 50 seats.

Note: I have no connection with WinMagic and won't benefit from any sales they make 🙂

Rgds,

Guy

Nov 28, 2009 11:55 AM in response to guydavies

I have the same problem. Checkpoint's Securedoc for Mac ist the only solution that can handle FDE-Drives. Unfortunately the only reseller that replied to my inquiry is in Switzerland and he only sells 10 Licences at once (a 150 Euro, which makes 1.500 Euro, ridiculous when you only need one or max. two licenses because you have to buy 10.)

However, I now filled out their form for an eval version.

If anyone with that problem is interested in making a group order, I join.

Nov 30, 2009 1:46 AM in response to idifix

I am currently testing a trial license from Checkpoint Full Disk Encryption.
http://www.checkpoint.com/products/datasecurity/pc/index.html

The company where I work is a Checkpoint reseller, and normally only has dealings with other companies, not end users. But we arranged a trial license and I can buy a single user license Checkpoint Full Disk Encryption if the test proves Checkpoint Full Disk Encryption is a good solution.

I created a bootable usb disk with Snow Lepoard on it. But I was unable to install FDE on it. After reboot I only get a blank screen, that's it. Probably it isn't supported to boot from a full disk encrypted removable drive, I can understand that.

I can't create a virtual Snow Leopard machine (legal reasons) to test it on. And all FDE solutions I found aren't compatible with Mac Server, which is a shame because you can virtualize Mac Server legally.

So now I am planning to change the hard-disk of my MBP this evening with another hard-disk to test Checkpoint FDE there. I don't want to upgrade my current Leopard installation to Snow Leopard only to discover it doesn't work as expected. I could of-course use my current installation and when it doesn't work rollback to a timemachine backup, but before that I have to decrypt my disk and uninstall PGP witch will take 1-2 days, and encrypt again when the test is over. Not pratical.

I will let you know how the test with Checkpoint Full Disk Encryption went!

Nov 30, 2009 2:07 AM in response to idifix

The Checkpoint Solution is a pure Softwaresolution. So it is vulnerable to the Frozen RAM Attack (irationally called Coldboot-Attack which is misleading because one could think that stopping the attacker from rebooting is solving the problem. It isn't.).

To say it clear: Frozen RAM makes a fully encrypted Laptop vulnerable if captured running with screensaver or in Suspend to RAM (S3).

The WinMagic Solution is the only one for Mac that can administer and use Hardware FDE Drives (such as Seagate Momentus FDE.4) and so eliminate the Frozen RAM Attack (because the key is not in RAM).

Nov 30, 2009 2:23 AM in response to SilentCry

I suspect PGP (wich I am using now) has the same problem. I know that keeping the MBP suspended while travaling is very unsecure, because then only the Mac OS X login is presented to the person using the MBP. For that very reason I always shutdown the MPB before I travel. Ofcourse this doesn't help when my MBP got stolen at work when I am at a coffee break. But the main reason for me encrypting all my data is when my MBP got stolen while traveling or when I have to give my MBP to a Apple retail center.

When you use a Hardware FDE Drive, does it mean you have to enter your FDE key again after you suspend your laptop? And does a FDE drive require third party software or does it 'run' on its own?

Nov 30, 2009 12:46 PM in response to guydavies

guydavies wrote:
I've had a fairly lengthy discussion with the folks at WinMagic because I'm in exactly the same situation as you.


Hi Guy,

Thanks for the reply. I have done some reading, to know more about the FDE drives from seagate, EFI vs. Bios, and so on. WinMagic does sound like the best solution, and the only one for hardware encryption support. It would be great to put a 500GB 7200 rmp momentus seagate drive into my MBP, that would really boost performance, hardware encryption + faster disk = great.

It's only a shame WinMagic isn't easy to get. Is there a final release who supports snow leopard? I am really doubting between Checkpoint and WinMagic now. I have my doubts about Checkpoint until now, but WinMagic is playing hard to get.

If there was a webshop somewhere who sells SecureDoc from WinMagic, I would order a copy TODAY

Dec 1, 2009 9:39 AM in response to idifix

Sorry, WINMAGIC SecureDoc ist the only solution that can handle Hardware FDE.

Let me explain how this works (I have successfully tested it unter Windows (sic))
The Exnterprise Models have a physically and logially separated partition. This holds the preboot environment. WinMagic's Software does nothing more than to activate this partition and configure it with the right passphrases. The hardware does all the job, basically.

Normal PC-Users can use the non-Enterprise (aka "BIOS ONLY") FDE-Drives. There the IDE SecurityPassword (known as Harddiskpassword, not equal to BIOS Password) locks the access to the drive and since the drive is at "always on"-Encryption with the built in hardware key it can not be tampered without knowing the drives Password. We Mac Users can not use this because of the flawed implementation of EFI without basic BIOS functions through Apple.

So, our only option is the Enterprise Model of the Seagate FDE.4 drives AND Winmagic Securedoc.

However, I have a reseller at hand. I can buy minimum 10 Licenses a 155 Euro each. If we get a few people here together, we could arange that as a "group order". Only the problem of trust remains. I am from Austria, I would collect the money and place the order - but of course everyone transferring 155 Euro to me would have to trust me.

Dec 2, 2009 6:23 AM in response to idifix

Hi idifix,

Sorry for delayed response.

No, they seem to deal through partners mostly, which is always a challenge because the partners will want to focus on big system sales. However, my experience was very good when I just contacted winmagic direct through their website. I simply posted a question and they called me the next day!

However, it is important to be clear that I'm still waiting for the release of the FCS version of WinMagic SecureDoc for Mac OSX 10.6.2. So I cannot comment on how good or bad it is. Only on the interaction I've had with their technical and sales folks.

Rgds,

Guy

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Anyone using SecureDoc Full-Disk Encryption for Mac from WinMagic?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.