Jetico Product Release Notes:

BestCrypt Volume Encryption v.3

Note: This document is regularly updated and is subject to change without notice. We invite you to share your feedback with us, including reporting issues with our products, via our online contact form at http://www.jetico.com/contact/.

• 15 MB disk space

• Windows 8.1
• Windows 8
• Windows 7
• Windows Vista
• Windows XP
• Windows 2012 Server
• Windows Small Business Server 2011
• Windows 2008 Server
• Windows 2003 Server

• Improved performance.
• Added support for 'Windows To Go'.
• Fixed error in keeping network shares on encrypted volumes.

• Fixed issue with 'Windows Automatic Repair' after some Windows updates on UEFI-based computers.

• Fixed system crash after some Windows updates (non-English versions of Windows).
• Fixed occasional hang when resuming encrypted system from hibernate.

• Fixed 'Error in loading Bestcrypt Volume Encryption UEFI Bootloader' on some Windows 7 systems.

• Added support for 32-bit UEFI-based computers.
• Fixed issue with 'Windows Automatic Repair' after encrypting system volume on some UEFI-based computers' models.

• Fixed occasional system hang when typing a symbol in 'Password enter' box.

• Recovered alert message about incorrect password attempts at boot time.
• Fixed error in TPM module detection.
• Fixed error in Anti-keylogger filter when working through Remote Desktop Connection.

• Improved for compatibility with Windows 8 Updates.

• Fixed compatibility issue with Dell UEFI-based computers.

• Information gathering utility added to report encrypted volumes and system details for error diagnosis.
• Fixed sector counter in rescue procedure for large volumes.
• Added the ability to automatically disable Windows 'Fast Startup' option in Windows 8 which created insecure conditions for encrypted volumes.

• Improved update procedure for encrypted UEFI-based computers.

• Full support for UEFI Secure Boot.

• Enterprise Edition: Fixed minor bug.

• Fixed occasional system failure after encryption of boot volume on 64-bit systems.

• Enhanced support for saving/restoring network shares for large amounts of shared resources.
• Added support for non-standard UEFI boot manager on computers with ASRock motherboards.
• Fixed issue with hibernate mode on Windows 8 computers.

• Fixed minor bugs.

• Enterprise Edition: Central management of encryption policy distribution from JCM Console.

• Support for Windows 8, including the ability to encrypt Storage Spaces.
• Support for UEFI-based computers.

1. Faster initial encryption
   • In previous versions, the initial encryption process required encrypting entire volume. For large disks with terabytes of data, the initial encryption process would have required dozens of hours. So when you have a new disk drive with practically no information to be initially encrypted, version 3 of BestCrypt Volume Encryption allows you to just run a "Format and encrypt" process that avoids the long initial encryption of all that unused disk space. BestCrypt Volume Encryption is now as much as 4 times faster for new encrypted volumes when initialized by random data.
2. Rapid, convenient reconfiguration with More robust support of encrypted disk volumes
   • To reconfigure the size, location or type of software RAID, earlier versions of the software first required decryption of the encrypted volumes. Now version 3 of BestCrypt Volume Encryption automatically adapts its internal information for encrypted volumes when changing their configuration.
3. Two-Factor Authentication with conventional removable disks (like USB sticks)
   • With version 3 of BestCrypt Volume Encryption, encryption keys can be moved to removable storage. So anyone who wants to access an encrypted volume must: 1) know password for the key; 2) have the removable disk where the key is stored.
4. Option to boot encrypted volumes from trusted network for added layer of security
   • In this case, encryption keys of boot/system disk volumes are not stored on the local computer, but on a network server. Enterprises can now benefit from an additional level of security. Since encryption keys are stored on an enterprise server, access to encrypted computers will be only possible when connected to the enterprise network.
5. Overall performance boost from support for new machine instructions (AES-NI) in the latest Intel processors
   • As a result, speed of the AES encryption module utilizing AES-NI instructions increased up to 5 times. Disk access to the encrypted volumes now operate up to 30% faster.
6. Secure unattended reboot for enhanced server administration
   • Version 3 of BestCrypt Volume Encryption utilizes Trusted Platform Module (TPM) hardware available on many motherboards for the purpose of unattended reboot of computers with encrypted boot/system disk volumes. This feature is necessary to manage servers that are required to function around the clock. If such a server has an encrypted boot/system volume, every reboot of the server requires manual password entry at boot time. With this new feature, a server administrator can choose an interval of time when BestCrypt Volume Encryption (with help of TPM) should support unattended reboot of the server.
7. Inbuilt protection against accidental formatting in Windows systems
   • Users can now disable certain Windows messages to prevent accidental formatting of encrypted volumes. When Windows discovers that an encrypted unmounted volume has been connected, it asks for the volume to be formatted. In some cases, this resulted in accidental formatting of encrypted volumes. Version 3 of BestCrypt Volume Encryption now has the option to disable Windows formatting messages and offers an additional option to suggest mounting the volume for access.

• Beta version of BestCrypt Volume Encryption 3 announced.