Specops Key Recovery is a self-service solution for unlocking computers encrypted by Microsoft BitLocker and Symantec Endpoint Encryption. A user who is locked out at the pre-boot authentication screen can use Specops Key Recovery to unlock their computer, without calling the helpdesk. For added security, users are verified with multi-factor authentication. The solution supports a number of authentication factors, including Duo Security, Symantec VIP, Okta, PingID and YubiKey.
To protect corporate data and address regulatory requirements, organizations are increasingly turning to endpoint encryption solutions. Encryption at the hardware level of a storage device, commonly referred to as full-disk encryption (FDE), protects confidential information from unauthorized access.
FDE solutions, such as BitLocker and Symantec Endpoint Encryption, create a pre-boot authentication environment that require a secret key when the computer is started, or when a lockout is triggered. Without a self-service recovery solution, FDE will drive calls to the helpdesk.
Specops Key Recovery enhances security by extending multi-factor authentication to self-service key recovery. There are 20+ identity services available to ensure that you can select the best options for your users. However, since not all identity services are equally secure, administrators can assign each identity service a trust value, based on their perceived level of security. The trust assignment is managed via stars, as shown in the administrator view to the right.
After verifying their identity via the methods configured by their administrator, the end user can follow the steps on screen to finish the recovery key process, as shown on the right. The end-user friendly instruction found within Specops Key Recovery helps minimize encryption lockout calls to the service desk.
| Feature Highlights | BitLocker Alone | BitLocker with Specops | Symantec Endpoint Encryption Alone | Symantec Endpoint Encryption with Specops |
|---|---|---|---|---|
| Self-service key recovery | Yes (MBAM integrated with SCCM) | Yes | Yes | Yes |
| Remote self-service key recovery | No | Yes | No | Yes |
| Multi-factor authentication | No | Yes (20+ identity providers) | No (security questions) | Yes (20+ identity providers) |
| Integration with self-service password reset | No | Yes, with Specops uReset | No | Yes, with Specops uReset |
RECENT PRODUCTS
CATEGORIES
SUBSCRIBE
Get monthly updates and news.
