Backup & Storage Blog

Full Disk Encryption with CMS EasyEncrypt Upgrade Kit

2008-08-27T17:54:00.001-07:00

A quick video demo of our new EasyEncrypt full disk encryption hard drive upgrade solution.

CMS Products Introduces an EasyEncrypt Upgrade Kit

2008-08-20T15:54:00.000-07:00

Costa Mesa, Calif., (August 15, 2008) – CMS Products, Inc., (http://www.cmsproducts.com/) a leader in data security, backup, disaster recovery and content management technologies today announced availability of its “EasyEncrypt” Upgrade Kit for notebook computers with SATA hard disks.
The EasyEncrypt upgrade kit allows notebook computer users to quickly and easily replace existing, non-encrypted disk drives with a state-of-the-art, secure, hardware encrypted disk drive using AES 128-bit encryption and strong password support.

Because the EasyEncrypt utilizes “always on” data protection via its government grade AES 128-bit encryption scheme, data is always safe and secure. EasyEncrypt supports BIOS level ATA password locking for pre-boot authorization.

With EasyEncrypt, a computer’s Windows operating system, applications, data and personal settings are seamlessly transferred to the new hardware-encrypted disk drive supplied with the EasyEncrypt upgrade kit. The new encrypted disk drive can then physically replace the non-encrypted disk drive within the notebook.

The EasyEncrypt upgrade kit comes with all of the hardware required to connect its encrypted disk drive to your system via the USB interface. After the transfer of all data to the new encrypted disk drive is complete, the old, still functioning unencrypted disk drive can be used in the external enclosure supplied with the kit. This provides the user with additional portable storage for data with little security value.

EasyEncrypt is available through resellers and at http://www.cmsproducts.com/

About CMS Products
CMS Products has sold more than two million units of software while installing more than four million complete storage solutions in 90-plus countries. The complete line of product offerings includes automatic backup solutions for both portable and desktop computers, RAID systems, backup and disaster recovery software, media management software, notebook hard drive upgrades and data transfer kits and high capacity desktop hard drives.

Another entry for the Identity Theft and Data Loss file...

2008-07-08T08:26:00.000-07:00

We saw the following story about a potentially major personal data breach affecting Google employees and thought it was worth passing on.

As Valleywag and eWEEK originally reported on July 2nd, that Google employees hired before Dec. 31, 2005, received notices that their personal data, including Social Security numbers and birth dates had been compromised by a break-in at Colt Express Outsourcing Services, a payroll and human resources outsourcing company.

The Valleywag report says the break-in occurred at Colt Express on May 26 and Google informed employees on June 9 about the breach. As a result, employees are getting a free year of identity theft protection.

Google employees looking to get an explanation from Colt Express will find the company's Web site is no help. The site only reports that the "home page will be reconstructed."

The likely reason for the Colt Express site being down is that Ceridian, the giant payroll processing and human resources company that serves more than 25 million employees, announced in early February 2008 that it had acquired "certain assets" from Colt Express. Ceridian's benefits services division is now providing services to Colt's clients.

This latest case demonstrates again that poor physical security is a more prevalent cause of data breaches than remote hacking attacks. Most of the biggest data breaches reported over the past couple of years have resulted from laptop computers being lost or stolen.

This means that the solution to these problems is a combination of improved physical security at business offices of all kinds to make it harder to steal computers and new data protection services that attempt to erase or block access to storage disks after computers have been stolen.

On June 30, Dell started offering a set of services for its business computers that not only try to track missing or stolen laptops, but also attempt to remotely erase sensitive corporate data from a hard disk drive.

Such services are likely to become more prevalent as corporate IT managers learn that they haven't truly secured employee and customer data until they implement some kind of effective system that tries to block access to data contained on the hard disks of lost and stolen computers.

According to Vallywag, employees of CNET Networks were also affected by this security breach.

CMS Products offers a suite of data security solutions, including the ABS Secure Encrypted Backup solution for laptops and CE Secure encryption software, technology that could have offered much greater data protection for the employees of Google and CNET Networks.

10 Ways Your Employees Pose a Security Risk for Your Organization

2008-05-29T08:28:00.000-07:00

eWEEK.com posted an interesting article summarizing the top business security risks on their web site. We summarize here:

1. USB Drives - Unprotected USB drives are a prime way of letting sensitive company data walk out the door. Short of blocking USB flash drives altogether, companies can use device management software to monitor the ways the drives are being used.

2. Laptops - Employees are taking laptops everywhere, especially as they get lighter, making them more vulnerable to loss or theft. But even taking them to the safety of employees' own living rooms doesn’t protect these devices from infection through improperly secured home networks, exposing enterprise networks to viruses and other malware.

3. P2P - Applications such as Skype and instant messaging create security holes that can let Trojans and other spyware onto your network, particularly if employees are allowed to share those infected files.

4. Employees sending sensitive work files to their unaudited personal Web addresses are vulnerable to having their accounts hacked and critical company data stolen because, in theory, Web mail doesn’t have the same security as your enterprise e-mail.

5. WiFi - Logging onto unsecured wireless networks at home, the local Starbucks or on the road leaves data at risk unless employees are careful to log onto networks through a VPN or take other security measures.

6. Smart Phones - Allowing employees to bring nonstandard-issue smart phones and PDAs into the workplace means they’re storing highly portable and sensitive data on equipment that they can take home with them if they leave the company, leaving you with little or no security recourse.

7. Collaboration Tools and Hosted Software - Collaboration tools such as SharePoint, wikis and even e-mail distribution systems are great in theory but security risks in practice, unless administrators actively monitor the distribution and usage of user names and passwords. Not taking these security measures leaves the systems open to people who should not have access.

8. Social Networks - Facebook and MySpace in particular are unsecured and invite employees to share critical information while wasting time, while add-on applications available through those sites could hide malware and spyware, posing additional security threats.

9. Unauthorized Software Updates - Allowing employees to download patches or upgrades before your networks are ready can render user PCs and the network itself vulnerable to hacks and other security attacks.

10. Virtual Networks - Avatars posing as colleagues or "friends with benefits" could actually be competitors hoping for a chance to steal corporate data, passwords or other access vectors to sensitive information.

Secure Encrypted Backup Solutions by CMS

2008-05-27T17:24:00.001-07:00

A quick video demo for our ABS Secure encrypted backup solutions.

Tips on how to recover files

2008-05-02T14:36:00.001-07:00

We thought this was quite a useful instructional on various methods to recover files.

Redundant Backup Solutions by CMS

2007-11-09T16:14:00.001-08:00

We have put together a quick video to demonstrate the CMS Velocity2 Series Redundant Backup Solutions.

ABSplus Demo - Disaster Recovery via Drive Swap

2007-09-28T14:38:00.001-07:00

This video demo shows how fast and easy it is to recover from a hard drive disaster by swapping the drive in your laptop using your CMS ABSplus backup system. You can use this method for both Laptop or Desktop backup systems. You can also recover using the CMS bootable Rescue CD, however, using the Rescue CD can take several hours. This demo is intended to show the faster method of drive swap.

More information on CMS ABSplus automatic backup systems can be found on our web site at:

http://www.cmsproducts.com

Upgrading Hard Drive with CMS EasyBundle

2007-09-26T08:46:00.000-07:00

Here is a video demo which shows hot to upgrade your laptop hard drive using a CMS EasyBundle hard drive upgrade kit.

More how-to videos can be found on our You Tube Channel.

Backing Up Laptop - How To

2007-09-26T08:42:00.000-07:00

Here is a quick video demo of how to backup your laptop using a CMS ABSplus automatic backup system.

More how-to's can be found on our You Tube Channel.

CMS Products Announces new ABS-Secure Line of Encrypted Hard Disk Solutions

2007-05-15T08:00:00.000-07:00

COSTA MESA, Calif., (May 15, 2007) – CMS Products, Inc., (www.cmsproducts.com) a leader in data backup, disaster recovery and content management technologies today announced it has released its new ABS-Secure (Automatic Backup Solution-Secure) portable data backup and disaster recovery solution featuring preconfigured support for 256-bit AES encryption technology.

The ABS-Secure utilizes new super-fast SATA hard drives and CMS Products’ award-winning BounceBack™ Express data backup and disaster recovery software. Coupled with CMS’ CE-Secure preconfigured 256-bit AES encryption, the new line of secure and ruggedized external USB 2.0 drives provides portable computer users with exceptional data protection and security. As the CE-Secure encryption application is factory-loaded directly onto the drive, users can easily begin using their ABS-Secure drives with full confidence that their data is protected by strong AES encryption and sophisticated key management. In addition, the ABS-Secure provides maximum transportability of data with embedded access to the CE-Secure encryption software.

The new ABS-Secure SATA solutions give users professional security, data backup and disaster recovery that is extremely easy-to-use.

Weighing only seven ounces, the portable ABS-Secure is available in capacities of 80, 120, 160 and 250 gigabytes (GB).

ABS-Secure is available for Windows 2000/XP and Vista (32bit) and ships with a three-year warranty.

The ABS-Secure line of data protection solutions is proudly offered by leading resellers. For more information go to CMS Products at www.cmsproducts.com.

Seagate Works To Secure Laptops

2007-03-16T11:02:00.000-07:00

We saw some interesting developments in storage this week with Seagate's announcement of a fully encrypted notebook drive.

from eWeek

Laptop computers are quickly becoming standard-issue equipment for enterprise workforces across the globe, but the productivity gained from this added mobility comes at a price: increased exposure to theft, loss and damage.
Luckily, IT managers seeking to safeguard mobile data have a growing number of options at their disposal.

One such option is Seagate's fully encrypted Momentus FDE.2. On March 12, Seagate began shipping the drive to ASI Computer Technologies to be used in notebook PCs with hardened security. ASI is a hardware component distributor catering to white-box system integrators and is using the disks in machines branded for sale under the integrators' names.

The Momentus FDE.2 employs a dedicated ASIC to process the drive's AES 128-bit encryption on the fly. This enables SATA 1.5G bps transfer speeds on the 5,400rpm drive while minimizing load on a host machine's CPU. The drives will come in 80, 120 and 160GB capacities.

Seagate officials claim that the Momentus FDE.2's native hardware-based encryption gives it a performance edge over software-based encryption programs such as Microsoft Windows Vista's BitLocker and TrueCrypt, an open-source encryption application.

IT managers will be glad to know that Seagate's hardware-based encryption is always turned on and, perhaps more importantly, users cannot turn it off. After all, no security scheme is effective without consistent application in the field. Moreover, full disk encryption relieves the burden on users to remember to save sensitive files to specific folders or volumes on the drive.

To complete the circle of trust, ASI has incorporated Wave Systems' Embassy Trust Suite management tools. Wave's software handles management of keys and passwords, TPMs (trusted platform modules) and authentication with biometric, smart card and Windows domain logins.

According to Lark Allen, Wave Systems' executive vice president of corporate development, Wave has licensed software to most TPM chip manufacturers, and the company's Embassy software suite supports all existing TPMs. However, the current version does not support single sign-on. Therefore, users logging in with a fingerprint scan will be prompted for a password when starting up their systems and each time after the hard drive is power cycled.

Wave officials indicated that they would be working with OEMs and BIOS vendors to add that functionality in the future.

IT administrators can also access Seagate's DriveTrust security features built into the Momentus firmware with Wave's Embassy software. For example, the Momentus can store login and password pairs for as many as four users and four administrators. Regular user privileges are limited to log-in and password changes.
Administrators can add or remove users, assign recovery passwords and perform the "crypto erase" function to quickly and safely repurpose or retire disks storing sensitive data.

Hard Drives, Keep on Crashin'

2007-03-06T14:25:00.000-08:00

In the wake of Google's eye-opening report on hard drive failure comes this follow-up from Ars Technica, which states rather flat-out that the curious problem of drives that fail without warning isn't going to get better any time soon.

Read the article here.

CMS Releases BounceBack Enterprise Backup Software with Encryption

2006-10-17T13:22:00.000-07:00

New BounceBack Enterprise Data Encryption Software Protects Against Data Loss or Theft
Unique Split-key Encryption Scheme Sets Software Apart From Competition

COSTA MESA, Calif., (October 4, 2006) – CMS Products, Inc., (www.cmsproducts.com) a world leader in data backup, disaster recovery and content management technologies today began shipping BounceBack Enterprise data backup software with encryption for Windows 2000 and XP. BounceBack Enterprise is a next-generation backup software which features Advanced Encryption Standard (AES) 128 and 256-bit encryption with CMS Products’ patent-pending split-key custodial key arrangement.Recognizing the need for a new level of encryption key security for client-side users within corporate information technology (IT) and government arenas, CMS Products developed this extremely flexible split-key management scheme. With split-key encryption, should the primary user become unavailable, two IT custodians retain the ability to decrypt the user’s data. BounceBack Enterprise Tackles Data TheftAccording to Ken Burke, president, CMS Products, “our unique split-key encryption scheme is an advantage to corporate and government IT groups as it effectively helps to alleviate the growing problem of data theft.” He continued, “additionally, with our new split-key technology, IT administrators have the ability to access encrypted data should the primary user be unavailable.”As with all of the BounceBack software versions, BounceBack Enterprise software maintains the ability to create a bootable backup of the operating system, applications and data.BounceBack Enterprise is offered at $149 or as an upgrade from BounceBack Professional. All BounceBack data backup and disaster recovery products are available via an extensive reseller network and at: www.cmsproducts.com.

IT managers ignore removable media risk

2006-06-09T14:47:00.000-07:00

Here's a story we found interesting, according to TechWorld..

Two-thirds of IT professionals use non-encrypted removable media at work, in spite of being aware of the associated dangers.

The survey, conducted by mobile security company Pointsec Mobile Technologies Inc., revealed that 56% of employees downloaded corporate information onto their memory sticks, up from 31% last year. While 65% of those surveyed were aware of the potential danger that removable media presents, 66% admitted to neglecting a revision of their current security policies (with regard to removable devices). Only 21% secured them with passwords and encryption, and just 12% of organizations banned them completely from the workplace.

Interestingly, 4% of the participants felt the best way to avoid loss or theft of information from their device was to keep it with them, even if it meant sleeping with the USB stick around their necks.

[Read Article]

CMS Products Ships New BounceBack™ Version 7.0 Data Backup Software

2006-05-09T11:33:00.000-07:00

COSTA MESA, Calif., (May 9, 2006) – CMS Products, Inc., (www.cmsproducts.com) manufacturer of award-winning BounceBack Professional backup and disaster recovery software today announced the release of its new BounceBack Version 7.0 software (also BounceBack 7.0 for Mac). The company later this month will release BounceBack Enterprise, a
unique new data encryption software product with split-key access capability.

BounceBack Professional Version 7.0
One of the easiest-to-use, professional grade backup solutions on the market today, BounceBack Professional Version 7.0 protects documents, digital photos, video, music and more in the event of a hard drive failure. With an inviting new look and feel, the new BounceBack offers a host of features including backup scheduling, an automatic launcher, versioning, synchronization and QuickRestore™. List price for BounceBack Professional Version 7.0 is $79.00. Software upgrades are available via the CMS Products website download at $49 and a CD version is available at $59.

BounceBack Enterprise AES 128 and 256-bit Encryption SoftwareRecognizing the need for a new level of data security for client-side users within corporate information technology (IT) and government arenas, CMS Products is offering the award-winning BounceBack data backup software with Advanced Encryption Standard (AES) 128 and AES 256-bit software as a value-add.

This new product allows users to back up data with an extremely high degree of security, including CMS’ unique split-key encryption scheme – a failsafe system utilizing two split-key custodians. Split-key technology provides an advantage to IT groups as it provides the ability to access encrypted data should the primary user be unavailable.

As with all BounceBack versions, BounceBack Enterprise software maintains the ability to create a bootable backup copy of the system, applications and data even when confidential data is encrypted.

Data backup and recovery solutions available in many capacities
Along with BounceBack 7.0, CMS Products provides complete portable and desktop computer data backup and recovery solutions (as well as RAID systems) ranging from 20 gigabytes (GB) to up to 3.75 terabytes (TB) of capacity.

“People often find the thought of backing their computers up to be intimidating, time consuming and difficult,” explained Ken Burke, president, CMS Products. “Our new BounceBack Professional 7.0 incorporates the ease-of-use that BounceBack long has been known for, with a fresh, crisp user-friendly look and feel.” He continued, “we created BounceBack professional grade backup and disaster recovery software because we absolutely understand the pain that people suffer when a hard drive fails and irreplaceable photos, data and music are lost forever. With BounceBack that doesn’t have to happen to anyone, ever again.”

About CMS Products
Approaching nearly one million units of software sold and more than four million storage solutions installed in 90-plus countries, the complete line of CMS backup and storage products includes content management and automatic backup solutions for notebook and desktop computers, backup and disaster recovery software, notebook hard drive upgrades, data transfer kits and high capacity desktop hard drives. For more information, visit http://www.cmsproducts.com.