State-of-the-art Disk Encryption with Comodo

Written by:  • Edited by: Bill Bunter
Updated Aug 8, 2011
4

Here in our review of Comodo Disk Encryption 1.2 you will find all you want to know about securing hard disk and partitions by means of Comodo Disk Encryption which is also capable of encrypting files and folders in smaller containers called Virtual Drives, and offers two-factor authentication.

What is Comodo Disk Encryption?

Comodo Disk Encryption (CDE) is free software to secure files, folders, partitions or the entire computer hard disk by applying strong encryption. This stops preying eyes if you share a computer with someone else and protects your data if you laptop or external hard disk gets lost or stolen.

System Requirements and Interface
Rating Average

Comodo Disk Encryption 1.2 has very little RAM and free hard disk requirements. The encryption software can be installed on Windows 2000 as well as on 32 and 64-bit editions of Windows XP, Vista and Microsoft Windows Server 2003.The CDE 1.2 interface is logically organized and easy to use. Yet, the GUI, as is the software, is not the latest generation. I wouldn’t be surprised if Comodo released a new Windows 7 compatible version of Comodo Disk Encryption with a more appealing interface in the near future.

(untitled)

Installation
Rating Good

As a best practice consider taking an unencrypted backup before touching encryption software. The install of Comodo Disk Encryption is easy and follows standard steps. After the welcome screen will you be presented the EULA which then leads over to the installation path, followed by the CDE ready-to-install summary. When the install has completed can you optionally subscribe to Comodo’s newsletter; clicking Next does in any case activate the free license of Comodo Disk Encryption. Finally, you have to restart your computer.

Features
Rating Average

Comodo lets you encrypt entire partition or drives with a right-click on the item in the Drives view. To make use virtual disk encryption change to the Virtual Drives view, right-click the empty pane and select Mount to create a new virtual drive or to mount an existing virtual drive.

When you create a new virtual drive you have to specify the size in MB. On the next screen you have to select as password as well as a hash algorithm such as MD5. Then you must choose an encryption algorithm. In case you are not familiar with them use AES or Twofish. You have then to answer the question whether you want File Drive or Memory Drive encryption. As the later is volatile File Drive, which creates an encrypted container on your disk, is probably the right choice in almost any circumstances.

Then, on the Save location screen indicate a path and specify a file name. The next step demands that you choose a drive letter. Clicking Finish prepares and mounts your virtual drive which might take some time depending on the size of the container. To make use of your newly created virtual disk use the format command located in the CDE context menu.

You can now finally use the virtual drive like any other storage with the objects being written to or read from (encrypted / decrypted)on the fly. To work with an already existing virtual drive select Mount Existing Virtual Drive, navigate to the container and enter the password to unlock it. After assigning a drive letter and hitting the next button the virtual disk is ready to use - It would obviously be an asset if these steps could be streamlined in future editions of CDE.

The CDE Drives tab lets you secure hard drives and partitions using encryption including the C:/ partition where Windows is installed. The steps and settings are essentially those outlined above for Virtual Drives. The disk encryption process can really take time, and the computer cannot be powered off until the process completes. So, again, it is crucial having a backup which also protects against power outages.

Make sure you don’t forget the password, and use the CDE GUI to make a copy of your USB stick certificate if you want to have something you know and something you have to start your CDE encrypted computer (two-factor authentication); CDE USB Memory Key Authentication can also be used on its own if you want. Additionally, you should use the wizard to create a Rescue Boot CD in case the Comodo Disk Encryption boot loader fails for some reason or another

(untitled)(untitled)

Performance
Rating Good

Comodo Disk Encryption 1.2 performs as any other drive encryption software - the time it takes to prepare a disk or virtual disk for storing encrypted objects is proportional to your storage capacity, a fast computer is an asset. After drive encryption or virtual drive encryption has been set up files and folders can be encrypted/decrypted on the fly with little performance overhead.

Help and Support
Rating Excellent

Comodo Disk Encryption comes with a fairly explanatory user guide which can be found in the GUI’s Help menu or be downloaded from the vendor’s website. Frequently asked question can also be found in Comodo’s forums, further assistance can be obtained writing an email to support.

Price to Value
Rating Excellent

Comodo Disk Encryption 1.2 is absolutely free without any catch.

The Bottom Line

Comodo Disk Encryption 1.2 offers basic drive and virtual drive encryption from a top vendor at no cost. Similar products such as BestCrypt with slightly more features cost as much as 60$ or more. The good news for users of Window Vista and later is that they can make use of BitLocker Drive Encryption. New integrated in Windows 7, but limited to the OS flagship editions, there is the free BitLocker to Go utility with which you additionally can encrypt removable drives such as USB pen sticks for example.

References

  • Author's own experience

    Screenshots by the writer


Comments

Showing all 3 comments
 
Mark Muller Sep 3, 2011 7:59 PM
@GeniSoftware
Agreed. Drive encryption can be risky, especially on RAID systems. Backup first, then try.
GeniSoftware Sep 3, 2011 2:51 PM
Problem with RAID Systems
This software locked me out of my computer. I encrypted my external USB drive with just password protection. The software automatically went ahead and over wrote all the Master Boot Records on all the installed drive.

When I start the computer. I was asked to enter the password.

I entered the correct password. No response.Panic!!!

Troubleshoot, keyboard? Bios Password? finally figured out the Boot Record as overwritten and their software does not work with my RAID card (INTEL).

Changed the BIOS to use SATA Legacy IDE. This time was able to enter password. System does not boot because of the change in Drive Controller from SATA to IDE.

My setup CD from ACER only offers to restore the system and does not fix the boot drive.

Solution :

Found Windows 7 OS CD

Used my laptop

Command Prompt with administrator rights

Mount my problem system drive using external USB housing.

Noted the drive letter (eg drive f:) for the exnternal USB drive

look for the program bootsect.exe
in the OS CD - Boot (folder)

ran this command

bootsect /nt60 f: /mbr

f: is the drive letter, check your system for the drive letter that is assigned when the drive is plugged in and replace the drive letter.

This is how I fixed the problem.

As a whole this Free software from COMODO - Disk Encryption caused me a nightmare which I am still trying to wake up from.

Drive encryption is a dangerous thing with the software. Please be careful. Backup first then try.
JJ Jan 27, 2010 2:47 PM
This product is extremely buggy
Beware, when you encrypt you may be locked out of your hard drive - a BOOT password is added even if you encrypt an external hard drive and do not make any changes to your OS drive.

Secondly, there is no support so if you do have problems you are out of luck.

I lost hours of work trying to get back into my workstation after reboot (there was NO WARNING what soever that the software would boot password the computer), and was never able to get back into the external drive after using this.

 
blog comments powered by Disqus
Email to a friend