Business Security

Mac OS X 10.5 Leopard has many security features built-in for business users. We'll walk you through the pros and cons of each below with links for how to set these up on your computer.

Learn How-to:

Encrypt All Your Files

FileVault is one of the built-in encryption methods included with OS X 10.4 Tiger and OS X 10.5 Leopard. Using AES-128 encryption, it protects all of your personal files (a.k.a. home folder) so they cannot be read by others.

Pros

All of your personal files are automatically encrypted and decrypted as you use them. You don't have to think about it or type in multiple passwords as you work.
FileVault uses AES-128 encryption which is approved by the National Security Agency to protect classified information. National policy on the use of AES to protect national security systems link (PDF)

Cons

Since FileVault encrypts and decrypts files as you use them, it can affect the performance of your computer. We don't recommend FileVault for tasks like movie editing or advanced graphics work that requires rendering. However, you can create two separate user accounts to work around this. Use FileVault on the user account with your business documents and use creative applications on an account without FileVault.
FileVault affects how your backup software works. Make sure to let us know if you plan to use FileVault so we can find the best backup solution for you.
If you forget your log-in and master password, you will not be able to access any of your files. These passwords cannot be reset and your files cannot be recovered.

How-to

Encrypt Select Files

This is the method we recommend to many users because it allows you to encrypt your most important documents while avoiding most performance drawbacks. Apple computers allow you to create encrypted disk images which can contain any files you want to protect.

Pros

Encrypted disk images can be used to secure files on CDs or USB flash drives. This way if you loose a CD or USB flash drive, your information is still protected.
With Mac OS X 10.5 Leopard you can protect files with AES-128 or AES-256 encryption. Both methods are approved by the National Security Agency to protect classified information. AES-256 encryption is the standard for top secret classified information.

Cons

You'll have to remember to save your confidential files to the disk image. If you forget and leave files on your desktop or in your inbox as email attachments, they won't be protected.
You have to pick the size of your disk image and if you fill it up, you'll need to create another one or delete files to save space. (You can create a disk image that expands as you add files but it requires some advanced computer savvy.)

How-to

Protect PDF Documents With a Password

Apple's built-in PDF creation utility allows you to turn any document that you can print into password protected PDF. With Mac OS X 10.5 Leopard, you can choose to require a password to open the PDF, copy information from the PDF and/or print the PDF.

Pros

Password protected PDFs are compatible with almost any computer running a recent version of Adobe Acrobat Reader.This allows you to send documents to Windows users too.

Cons

There are programs that can crack PDF passwords. Adding a password will stop most prying eyes but not all.

How-to

Securely Erase Files

As in real life, when you empty the trash on your computer, someone could still read through your garbage. Your computer marks erased files as free space on your hard drive and until another file is created to overwrite that free space, a fairly determined individual could recover the deleted files. Mac OS X includes a secure way to erase files with secure empty trash.

Pros

Secure empty trash is like a digital paper shredder without the mess and paper jams.

Cons

Securely emptying the trash takes additional time because the computer has to overwrite all the files marked for deletion with meaningless data. However, you can continue to work while the trash empties.
If you securely erase a file you need by accident, you won't be able to get it back.

How-to

Securely Erase Entire Hard Drives

When you're ready to retire an old computer or other data storage device you should securely erase the data from it. There have been more than a few cases of drives with proprietary data ending up in the wrong hands after being sold or thrown out. Mac OS X allows you to securely erase most any device.

Pros

You can choose the level of security used to erase your disk. Zeroing out the data is fairly quick and provides good security. A 7-pass erase takes 7 times as long and meets the US Department of Defense standards for security. A 35-pass erase provides the best security by overwriting your files 35 times.

Cons

To erase your computer's main hard drive (start-up disk) you'll need to boot the computer from a Mac OS X disk or your computer's original software restore disks.

How-to