Enterprise environment disk encryption

1. A computer-implemented method for deploying a disk encryption password on an enterprise computer system, the method comprising:

causing the installation of a disk encryption agent on a client computer of the enterprise computer system, the disk encryption agent being in communication with an enterprise encryption service;

encrypting, at the enterprise encryption service, a disk password generated at the enterprise encryption service, the encrypted disk password being encrypted using a public key of a public/private key pair generated by the disk encrytion agent at the client computer;

transmitting the encrypted disk password to the disk encryption agent on the client computer; and

encrypting a disk of the enterprise computer system using the encrypted disk password.

2. The method of claim 1 , further including the steps of:

causing the encrypted disk password to be decrypted at the client computer using the private key; and

causing the decrypted disk password to be set as a current disk password on the client computer.

3. The method of claim 2 , further including the step of causing instructions to be provided to a user of the client computer to manually enable login to the encrypted disk.

4. The method of claim 2 , further including the steps of:

receiving a request message from the client computer to reset the decrypted disk password, the request message including a second public key of a second public/private key generated at the client computer;

verifying the identity of the client computer by comparing information within the request message with a record on a client management system that is in communication with the enterprise encryption service;

encrypting, at the enterprise encryption service, a second disk password generated at the enterprise encryption service, the second encrypted disk password being encrypted using the second public key; and

transmitting the second encrypted disk password to a disk password reset agent on the client computer

decrypting the second encrypted disk password at the client computer using the second private key; and

setting the second decrypted disk password to be a current disk password on the client computer.

5. The method of claim 1 , further including the step of storing the encrypted disk password on a client management database that is in communication with the enterprise encryption service.

6. The method of claim 1 , further including the steps of:

receiving, at the enterprise encryption service, a file generated at the client computer, the file containing identifying information of the client computer and a public key of a public/private key pair generated at the client computer; and

prior to the encrypting step, verifying the identity of the client computer by comparing the contents of the file with asset-identifying records on a client management system that is in communication with the enterprise encryption service.

7. The method of claim 1 , wherein prior to the encrypting step, the method further includes the steps of:

receiving, at the enterprise encryption service, a file generated at the client computer, the file including identifying information of the client computer;

verifying the identity of the client computer as an asset of the enterprise computer system;

transmitting a temporary password to a resident encryption module on the client computer;

causing the temporary password to be set as a current disk password on the client computer; and

causing a user to be instructed to reboot the client computer and login using the temporary password.

8. The method of claim 7 , wherein the verifying step includes comparing the contents of the file with asset-identifying records on a client management system that is in communication with the enterprise encryption service.

9. The method of claim 7 , further including the steps of:

requesting the disk encryption agent to generate a token, the token containing at least one of one or more identifiers of the client computer and personal information of a user assigned to the client computer; and

storing the token in a client management system that is in communication with the enterprise encryption service.

10. The method of claim 9 , wherein the identifying information includes at least a portion of the token contents.

11. The method of claim 1 , further including the step of causing the client computer to delete the disk encryption agent.

12. A method for installing a disk encryption password on a client computer, the method comprising the steps of:

decrypting an encrypted disk password at the client computer, the encrypted disk password having been created from a disk password generated at and transferred from a remote device and encrypted at the remote device using a public key of a public/private key pair generated by a disk encryption agent at the client computer;

setting the decrypted disk password to be a current disk password on the client computer; and

performing manual modification of at least one login protocol so as to enable access to the encrypted disk.

13. A non-transitory computer readable medium having stored thereon instructions which when executed by a processor cause the processor to perform the method of:

causing the installation of a disk encryption agent on a client computer of an enterprise computer system, the disk encryption agent being in communication with an enterprise encryption service;

encrypting, at the enterprise encryption service, a disk password generated at the enterprise encryption service, the encrypted disk password being encrypted using a public key of a public/private key pair generated by the disk encryption agent at the client computer;

transmitting the encrypted disk password to the disk encryption agent on the client computer; and

encrypting a disk of the enterprise computer system using the encrypted disk password.

14. The computer readable medium of claim 13 , further including executable instructions to cause a processor to perform the steps of:

causing the decryption of the encrypted disk password at the client computer using the private key;

causing the decrypted disk password to be set as a current disk password on the client computer; and

causing instructions to be provided to a user of the client computer to manually enable login to an encrypted disk.

15. The computer readable medium of claim 13 , further including executable instructions to cause a processor to perform the step of storing the encrypted disk password on a enterprise encryption database that is in communication with the enterprise encryption service.

16. The computer readable medium of claim 13 , further including executable instructions to cause a processor to perform the steps of:

receiving, at the enterprise encryption service, a file generated at the client computer, the file containing identifying information of the client computer and a public key of a public/private key pair generated at the client computer; and

prior to the encrypting step, verifying the identity of the client computer by comparing the contents of the file with asset-identifying records on a client management system that is in communication with the enterprise encryption service.

17. The computer readable medium of claim 13 , further including executable instructions to cause a processor to perform the steps of:

receiving, at the enterprise encryption service, a file generated at the client computer, the file including identifying information of the client computer;

verifying the identity of the client computer as an asset of the enterprise computer system;

transmitting a temporary password to a resident encryption module on the client computer;

setting the temporary password to be a current disk password on the client computer; and

instructing a user to reboot the client computer and login using the temporary password.

18. A system comprising:

a distributed computing system including one or more client computers connected to an electronic network;

at least one server connected to the electronic network and having a control processor configured to support operation of an enterprise encryption service, the enterprise encryption service capable of installing a disk encryption agent on at least one client computer, generating an encrypted disk password using a public key of a public/private key pair generated by the disk encrytion agent at the at least one client computer, and transmitting the encrypted disk password to the at least one client computer; wherein the encrypted disk password is configured to enable access an encrypted disk of the at least one client computer;

an enterprise encryption database that is in communication with the enterprise encryption service via at least one of the electronic communication network and a dedicated connection; and

a client management system that is in communication with the enterprise encryption service via at least one of the electronic communication network and a dedicated connection.

19. The system of claim 18 , further including:

the at least one client computer including a resident encryption module;

the control processor further configured to transmit the encrypted disk password to the client computer so the a disk connected to the at least one client computer is encrypted by the resident encryption module using the encrypted disk password.

20. The system of claim 18 , further including a web service administration console having a modular design configured to support open interaction between the web service administration console and at least one of the enterprise encryption service and the client management database during data operations.