(Before you read the boilerplate on this toolkit, I want to point out that the really interesting component of this download is the release of the EFS Assistant. The EFS assistant is a client-side tool primarily for Windows XP SP2 or Windows Vista laptops that automatically ENCRYPTS certain files or folders using EFS depending on their type/extension.
Basically, an organization can set up a central "policy" on their network using Group Policy that dictates what filetypes should automatically be encrypted on people’s machines. This prevents the need to encrypt every Tom, Dick, and Harry file on people’s PCs causing "CPU encryption storms" common within many security solutions.
More information on how EFS Assistant works is available here:
http://www.codeplex.com/EFSAssistant/Wiki/View.aspx?title=Mini-Evaluator%27s%20Guide&referringTitle=Home
————————-
DESCRIPTION:
The Data Encryption Toolkit for Mobile PCs describes how to effectively use both EFS and BitLocker to help address your organization’s requirements to protect data on mobile PCs. The Toolkit also provides you with software tools and scripts to help you centrally configure, deploy, and manage encryption settings on all your mobile PCs.
The Data Encryption Toolkit for Mobile PCs includes the following four components:
- Executive Overview. This document provides a broad survey from a business and regulatory perspective of how mobile data is at risk and how the Data Encryption Toolkit for Mobile PCs can help. It also provides information about how you can use the guidance and tools in this Solution Accelerator as well as tools you may already have licensed to mitigate these risks.
- Security Analysis. This guide provides an in-depth review of how EFS and BitLocker can help you address the unique risks associated with data on mobile PCs.
- Planning and Implementation Guide. This guide describes how to plan for, configure, deploy, and operate EFS and BitLocker in your organization.
- Microsoft Encrypting File System Assistant. The EFS Assistant is a software tool you can use to centrally control EFS settings on all your PCs (the EFS Assistant also works with desktop PCs). The EFS Assistant can help you encrypt the sensitive files on your users’ laptops, regardless of where those files are located. In addition, the EFS Assistant operates transparently to end users, eliminating training issues or other impacts. Note that you can obtain the EFS Assistant in one of two ways. The Microsoft version of the tool is available on this page. A community version of the tool is available for download from CodePlex, Microsoft’s shared source development site at www.codeplex.com/EFSAssistant.
kurtsh
Kurt Shintaku's Blog 