UTIMACO Safeware A/G SafeGuard Easy ver.4.40 Build 3.53 (Munich, February 6th, 2008) - provides total company-wide protection for sensitive information on laptops and workstations. Boot protection, pre-boot user authentication and hard disk encryption using powerful algorithms guarantee against unauthorized access and hacker attacks. SafeGuard Easy is both simple to install and operates transparently in the background.
Unauthorized persons are prohibited from accessing the system because pre-boot authentication (PBA) requires the authentication of the user before the operating system is started. PBA cannot be manipulated and therefore guarantees maximum security.
Many other protection programs are ineffective because they permit the readout of the keys or passwords from the hard disk. SafeGuard Easy prevents this by generating the code key required for boot-up from the typed password. Even hard disk analysis tools become ineffective against SafeGuard Easy.
Unlike other solutions which encode only selected files or directories, SafeGuard Easy encodes the entire content of the hard disk. This means that all the information on the hard disk is protected - regardless of where the data is stored.
Utimaco Safeware uses powerful algorithms and encryption methods to ensure that operating processes are executed efficiently and without delays.
SafeGuard Easy provides boot virus protection to resist boot sector viruses - hazardous sabotage tools that operate by interfering with the Master Boot Record and allowing hackers to gain control over the PC.
SafeGuard Easy lives up to its name within all organizations regardless of their size. The software can be installed conveniently throughout the company using configuration files without user intervention. SafeGuard Easy also allows user-specific privileges to be defined (e.g. disabling disk encryption).
The most significant features of SafeGuard Easy are:
- Boot protection - allows boot-up of the operating system only after correct authentication.
- Strong hard disk encryption to protect information.
- Encryption of external data media (e.g. floppy disk, ZIP, JAZ etc.).
Easy handling, full scalability, distribution via network and central administration confirm SafeGuard Easy as the security solution of choice for every organization whatever the size.
Pre-Boot Authentication - The user is authenticated by means of pre-boot authentication (PBA) before the system is started and therefore before the operating system is booted. Neither keys nor passwords are stored on the hard disk.
Hard Disk Encryption - SafeGuard Easy encrypts the entire hard disk or individual parts, irrespective of the file system (e.g. NTFS, FAT etc.) - sector by sector, including the operating system, temporary files and all information. SafeGuard Easy effectively closes the security gaps left open by arbitrary file encryption. Data that has been encrypted using SafeGuard Easy is securely protected from unauthorized access, even if the hard disk is removed.
Algorithms - SafeGuard Easy 4.40 supports the newly designated advanced encryption standard, AES, with 256 and 128 bit key length, Rijndael 256 bit as well as IDEA(128 bit), single DES (56 bit), Blowfish-16 (256 bit), Blowfish-8 (256 bit), Stealth-40 (48-64 bit), XOR (64 bit). This powerful and globally accepted algorithm guarantees maximum protection.
Encryption of External Data Media - SafeGuard Easy supports the secure exchange of data between individual company offices by using configurable data media encryption (such as floppy disk, ZIP, JAZ etc.).

What is new SafeGuard Easy in the version 4.40 has the following most important new features: The latest version of SafeGuard Easy contains many new functions, among other things certification to FIPS 140-2 (Level 1) and compatibility to Absolute’s Computrace Software.
Integrated boot manager (TWIN-BOOT) - Today, it is a frequent requirement that a laptop’s hard disk is split into a private, unprotected partition, managed by the user, and an encrypted partition that is managed by the user’s company. SafeGuard Easy now provides an integrated boot manager for this purpose, with which configurations of this kind, or similar ones, can be implemented easily and securely, from one central point. In this way the company data remains protected and the user has absolute freedom on their private partition, even when it comes to choosing the operating system.
Removable media encryption now also covers USB memory media - The range of removable media supported by SafeGuard Easy has now been extended to include the current generation of Plug and Play memory cards (USB memory sticks), so they can also be used for secure data exchange.
In addition, it is now possible to temporarily switch encryption for an individual floppy drive or removable media disk drive on or off, separately from the others.
The system areas, individual partitions or a maximum of four hard disks can be encrypted SafeGuard Easy supports the following file systems: FAT-12, FAT-16, FAT- 32, HPFS, NTFS and NTFS5.
Operating Systems: Microsoft Windows 2000, Microsoft 2000 Server, on Microsoft Windows 2000 Advanced Server - is not supported!, works on Windows XP Home/Professional and Server 2003 Standard Edition.
Microsoft Windows XP with ServicePack 2 - is support!
Supported memory media: Hard disks (IDE, SCSI, serial ATA, PCMCIA, Firewire, USB), Floppy disks Removable media such as ZIP/JAZ, USB memory sticks.
What's New in version 4.40.3. 53:
• The entry fields for the passwords in the Responsecode Wizard showed a „|“. This was improved to show now a „*“’.
• It could happen that the computer hung with a blank screen with the cursor blinking in the upper left corner of the monitor afterhaving entered the user credentials in the PBA. This is fixed now.
• A BSOD could occur when a USB device was removed without using the hardware removal tool of Windows. This was a problem in the SGE filter driver and is fixed now.
• The „New Hardware found“ - Wizard now also does no longer start after the mirgration of SGE from an earlier version.
• An error in the display of the correct encryption state in SGESTATE was fixed.
• It could happen that the WksCfgSrv crashed after the logon of a user to Windows. This is fixed now.
• The task bar now shows when an open SGE application is on the desktop.
• The icon for the FIPS monitor was not restored after an explorer restart. This is fixed now.
NEW Features in version:
Support for Lenovo’s Client Security Solution (CSS) 8.0 and Rescue and Recovery 4.0 - SafeGuard Easy continues to be compatible with Lenovo’s ThinkVantage technologies.
Additional authentication via Aladdin NG-Flash Token - SafeGuard Easy extends the number of supported authentication devices to the Aladdin NG-Flash USB token. The token can be used to authenticate the user in Pre-Boot Authentication (PBA) and management applications in the same way as other tokens from Aladdin, Verisign and RSA.
Supports new data format of RSA SID 800 token - RSA has recently changed the data format on its SID 800 tokens. SafeGuard Easy 4.40 is now compatible with this new data format.
Enhanced support for forensics - A new command line parameter called "NoReboot" has been defined for the SafeGuard Easy emergency recovery utility. It can be used to prevent an automated reboot after hard disk decryption (helpful for forensic harddisk analysis).
Please also note the existing compatibility of SafeGuard Easy with forensic software such as EnCase!
Simplified installation - The installation modules for token logon, which were formerly separate, are now optional parts of the SafeGuard Easy main setup, so they can be installed more effectively within one installation step.
Improved manageability in LANDesk - SafeGuard Easy 4.40 includes additional options enabling it to be more efficiently managed by the LANDesk management console.
Database setup script for Microsoft SQL Server 2005 - SafeGuard Easy 4.40 extends the provided setup scripts to the central management server by one for Microsoft SQL Server 2005.
Various minor improvements - e.g. Challenge / Response option for default user in fingerprint mode and some more.
F.A.Q. -------| Do Utimaco Products have Backdoors? |-------
Question: Does Utimaco have backdoors to its SafeGuard products that would allow access to encrypted data in case users have forgotten their passwords?
Answer: Utimaco security products (SafeGuard Easy, PrivateDisk, Private Crypto, PDA and LANCrypt) do not offer any backdoors whatsoever, which would allow to access encrypted data without knowledge of a proper password or certificate key.
SafeGuard products provide a number of mechanisms that allow the custo-mers themselves to take precaution.
For example, customers can configure recovery passwords or certificates for administrators for all products except of PrivateCrypto. These passwords or certificates can be used to allow users to reset their passwords or to grant access to encrypted data.
Attention: If these recovery functions have not been configured by the customer, there is no way for the customer himself nor Utimaco to access/decrypt the data if the user password has been forgotten.