Re: [Fed-Talk] [Posted] Best Practices for Deploying FileVault 2
Re: [Fed-Talk] [Posted] Best Practices for Deploying FileVault 2
- Subject: Re: [Fed-Talk] [Posted] Best Practices for Deploying FileVault 2
- From: "Trouton, Rich R" <email@hidden>
- Date: Wed, 29 Aug 2012 19:03:00 +0000
- Thread-topic: [Fed-Talk] [Posted] Best Practices for Deploying FileVault 2
On Aug 29, 2012, at 1:15 PM, Shawn Geddis wrote:
Fed-Talk Community,
Those of you that have been asking for a whitepaper on Deploying and Understanding FileVault 2 can now grab a fresh copy of the 1.0 version from the Apple Training and Certification website for OS X and OS X Server.
Best Practices for Deploying FileVault 2
Be aware that this has taken some time and hence does not yet reflect the enhancements in Mountain Lion with the addition of fdesetup (FileVault enablement tool). This document version should prove to be a valuable resource to getting
you up to speed on the FV2 architecture, implementation and how best to approaching deployment within your organization.
Feedback, comments, complaints, etc. ... I know you are not a bashful group.
Shawn,
I'd like to lead off by saying "Thank you!" This paper provides a ton of detail that previously wasn't generally available.
One thing I would like to clarify is this section:
"The cryptographic modules in OS X have since been submitted and are expected to achieve validation for the OS X Mountain Lion 10.8 release. FileVault 2 under OS X Mountain Lion 10.8 will be FIPS 140-2 compliant."
Is this currently true for 10.8.1? Also, will this also cover 10.7.x? From the language used, my impression is that the answer is "No, not validated" for 10.7.x.
Thanks,
Rich
- Shawn
________________________________________
Shawn Geddis
Security Consulting Engineer
Apple Enterprise Division
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden
---
JFRC Help Desk
phone: x4030
The best way to get in touch with me is through email.
|
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden