Datasheet
Centralized Encryption Management
Organizations, both large and small, understand that
centralized encryption management is a critical component
to their security architecture. Wave’s software provides the
policy-based access controls, comprehensive reporting,
directory services integration, centralized control and end-user
access recovery. Companies require these capabilities to cost
eectively implement and manage data encryption and, most
importantly, prove that data is protected in the event that a
computer (or its hard drive) is lost or stolen.
Wave for BitLocker Management
Microsoft Windows
®
7 comes with an embedded software
encryption application called BitLocker. Unlike other stand-
alone software-based full disk encryption (FDE) applications,
the tight platform integration of BitLocker and its use of the
Trusted Platform Module (TPM), an embedded security chip in
virtually all PCs, makes it a good starting point for data-at-rest
protection for organizations moving to Win 7.
Wave for BitLocker Management provides a comprehensive set of
tools to automate and secure the conguration and administration
of Microsoft BitLocker. Wave’s software organizes the core Microsoft
capabilities into a simple and intuitive administrative application
for setting up and maintaining BitLocker clients. Wave for
BitLocker Management eliminates the cost and complexity
associated with creating custom scripts and Active Directory
schema extensions, associated with BitLocker. In addition, Wave’s
software provides a more secure BitLocker environment through
the automation of the Trusted Platform Module (TPM), for strong
key protection, the encryption of BitLocker recovery passwords
and the monitoring of BitLocker client conguration settings.
Manageability and Control
Wave for BitLocker Management provides a full set of capabilities
to remotely search for, initialize, congure and administer a global
deployment of BitLocker clients. Through native integration with
Microsoft Active Directory and the use of Windows Group Policy
Objects (GPO), assigning users and associated policies can be
performed within the directory framework — dramatically simplifying
deployment, thus accelerating the use of BitLocker encryption.
Microsoft Management Console (MMC) snap-in provides
•
both single user and group level control
Fully compatible with Windows Management
•
Instrumentation (WMI)
Delegated role-based administration with pre-dened
•
tasks for Enrollment Agent, Help Desk, Security Ocer
and System Administrator
Support for non-domain computers
•
Automates TPM ownership and control for greater security•
Key Benets:
Simplies deployment and ongoing 3
management by eliminating the burden of
writing and maintaining custom scripts
Reduces costs with the addition of 3
centralized control for activation,
deployment and on-going management
Increases security with the addition of 3
centralized policy enforcement, protected
recovery credentials and supervision of
the Trusted Platform Module (TPM)
Adds an authority of proof that data 3
is protected in the event of a lost or
stolen PC
Wave for BitLocker
®
Management
Automated Policy Management for Microsoft
®
BitLocker Encryption
Simplifying Encryption and Authentication