DESlock+ Pro v4.1.12 full-disk encryption provides both pre-boot authentication and fast, transparent data security using FIPS-compliant, 256-bit encryption. The removable media encryption feature can be configured to forcibly cloak USB memory sticks and external hard drives, and the DESlock+Go portable application stored on the same media enables the data to be accessed on a system that does not have DESlock+ installed. File, folder and email encryption works in conjunction with the patented distribution system using RSA key exchange and strong algorithms. The DESlock+ Centralized Enterprise Server console allows a single feature, such as full-disk encryption, to be deployed across the enterprise.

The management server can be deployed as a fully onsite solution via a proxy or as a hosted, cloud solution. The documentation is not clear on support for 64-bit operating systems. We weren't successful in loading the app in our 64-bit environment, so we moved to testing in the 32-bit setup. Server prep was made easy with a packaged utility. The rest of the install was wizard driven and easy to use. Once loaded, the management console is accessed via a web browser.

The console was easy to use. One can create policies, users, teams and client MSI packages [the Windows Installer, previously known as Microsoft Installer] to use for deploying endpoint software. However, we did not find any way to integrate with Active Directory in the interface or in the supplied documentation. This may pose an issue for larger environments. We had full control over all fixed, removable and virtual media, and could assign policies as we desired. This part was very easy to use.

The DESlock+ Go feature allows one to share encrypted files without having to share a key. This only works on devices with the client installed and uses the password to unencrypt the shared file. There also is an Outlook plug-in that allows one to encrypt emails on the fly and gives the recipient the option to decrypt the message using a password (DESlock user) or the shared key.