EH-Net

I need to implement full disk encryption for traveling laptops.   I would need Windows, Mac, and Linux support.  I also need an enterprise key management system that would allow me to recover lost and deleted keys.   Otherwise, I am pretty flexible but would prefer something not too bloated.    If I didn't need the enterprise key management feature, I would have already gone with Truecrypt :)

What do you guys use?  Do you have any recommendation for a particular solution?  Are there any I should stay away from?  Do you prefer PGP, PointSec, others?

Thanks!

When I first saw the name of the post, I was wondering why you hadn't just decided on truecrypt.  I suppose the key management features in truecrypt are lacking.  I have only used it for personal use and in an environment where key management wasn't an issue.  I figured someone had written a commercial key management "plugin" or something for TC by now, but google confirms that I am wrong.

Any investors out there???

When I looked into this about 2 years ago, the Senior Engineer (I've replaced him) and I were for PGP. The company however didn't want to spend the money.

One thing that was suggested, I think by the Director, was since they're company Laptops, was to use TC, but all the systems have the same passphrase.

In the end, we still haven't done it. And might use bit locker in the future. (not my choice).

i'd say go for truecrypt, being an open source supporter and all. At work we use SafeBoot, which comes with McAfee i believe. i dont know if it supports mac and linux as well, but i'm pretty happy with it.

Money not a problem? Checkpoint.

Enterprise support? Check (for management's peace of mind)
Multiplatform compatible? Check (for ease of deployment)
Centralised management facility? Check (for your piece of mind)
Lots of information on the net to research pros and cons? Check (so you can find out wtf you are buying beforehand)

I don't work for Checkpoint nor normally bother to endorse their products.

Take a look at PGP Universal. It meets all of your needs as far as management and platform support. We use it at work and it works well. Pretty much the best that is out there for mulitplatform support.

We use McAfee's Endpoint Encryption and are a Windows shop.  You can rule this solution out since it doesn't support Mac or Linux.

http://www.mcafee.com/us/enterprise/products/data_protection/data_encryption/endpoint_encryption.html