Deploy encryption
Manage deployment and encryption for individual computers or groups.
Manage Windows disk encryption centrally. Administrators control policies, users and encryption status from a management console.
94.95 € · per licence, minimum five licences
Manage deployment and encryption for individual computers or groups.
Manage password policies and supported authentication methods centrally.
Reports include encryption status, assigned users and logon status.
An administrator can provide a recovery code even when the client is not connected to the console.
Import users and computers from Active Directory and manage assignments through the web console.
The console manages SSO. Windows/domain policies, including password changes, remain in effect.
AES 256-bit, USB tokens and PKCS #11 smartcards, with centrally defined password policies.
Management over the internet, drive/login status reports and integrated or existing deployment tools.
Imported users and computers can be organised in a hierarchy and managed centrally.
Administrators set access rights for each user and can restrict them by time and information scope.
Forgotten user passwords can be recovered remotely after challenge-response authentication.
The console can install DriveCrypt Plus Pack over the network and manage encryption without requiring end users to perform each step themselves.
| Price & minimum quantity | €94.95 net per licence; minimum five licences. |
|---|---|
| Updates & support | Optional €28.49 net per licence per year. |
| Windows | Current version for Windows 11. Other supported systems: Windows 10, 8.x, 7, Vista, XP and Windows Server 2003/2008/2012. |
| Management | Web console, Active Directory import, remote installation, group policies, reports and SSO. |
| Recovery | Administrator-issued offline code; no client connection to the console required. Password change afterwards. |
Minimum order: five licences. The central console manages users, computers and encryption policies. Before deployment, prepare a tested backup and a recovery plan suitable for the environment.
The existing product documentation describes importing users and computers from Active Directory.
€94.95 net per licence, minimum five licences. Updates and support are optional at €28.49 net per licence per year.
Administrators manage installation, user assignments and encryption through a central management console. Computers and users can be managed individually or in hierarchical groups. Policies are defined centrally and deployed to assigned devices, helping organisations coordinate protection across their Windows fleet.
Yes. The Enterprise console can import users and computers from Active Directory. Administrators can then group imported entries, assign profiles and manage access rights centrally.
The management console allows administrators to deploy installation and encryption centrally over the network. This lets IT prepare and control a rollout without requiring every end user to perform setup themselves. The exact steps depend on the existing IT environment and policies.
Administrators can set rights for individual users and restrict them by access scope and permitted usage times. Password rules can also be defined centrally, aligning encryption with roles and organisational security policies.
The Enterprise edition supports remote recovery of user passwords through a challenge-response process. The user is authenticated before an administrator carries out the recovery. Recovery media can also be prepared for emergencies.
Yes. After authentication before Windows starts, single sign-on can simplify the subsequent Windows logon. The feature is associated with the relevant BootAuth credentials, while existing Windows and domain policies remain applicable.
Yes. The current Windows edition of the software supports Windows 11 and also runs on older Windows systems. See the technical overview for product-specific requirements.
Complement your encryption with SurfSolo: its VPN tunnel protects your internet traffic. Destination services see the VPN server’s public IP address instead of your connection’s IP. The selected server location can also change the location those services detect.