Full Disk Encryption for Windows

Maximum security with Full Disk Encryption for Windows

Full Disk Encryption Anywhere, Everywhere, No-Compromise Security

WinMagic’s SecureDoc offers full disk encryption for Windows software and is available in two editions:

Standalone / Unmanaged

SecureDoc’s Standalone Edition allows businesses to deal with the security of their IT environment efficiently leveraging features including: Full Disk Encryption (FDE), Multi-Factor Authentication, Removable Media Container Encryption (RMCE) and File and Folder Encryption (FFE). These elements help enterprises achieve their goals knowing that their employees and data are protected.

Enterprise / Managed

SecureDoc’s Enterprise Edition takes all the features of Standalone and gives control to the administrator via centralized management. WinMagic’s techno-logical approach strives for simplicity without sacrificing features. That’s why our encryption solutions can be managed from one platform easing the full disk encryption process. They will be able to apply access policies, sync user credentials via Active Directory, remotely reset passwords, enforce log-in policies such as pre-boot network-based authentication via PBConnex and more.




HP Client Security Support (laptops & Desktops)
Onscreen keyboard for tablets (Windows 8.x)
Windows 8.x Support
Multi-Language Support
Full Disk Encryption (FDE)
Full Volume Encryption (FVE)
Pre-boot Authentication
Single sign-on
Multi-factor Authentication (Smartcards, Tokens)
File Folder Encryption
TPM Support
Self-Encrypting Drives Support (Opal drives)
Network File Sharing Support
Lenovo ThinkVantage (RnR)
Microsoft BitLocker Management Support
TCG Enterprise Drive Support
Wireless Pre-Boot Authentication
Network Pre-Boot Authentication
Mac OS X FileVault 2 support
Centralized Key and Policy Management Console
Web console
Active Directory Integration
Linux Support (via SED only)

Unparalleled BitLocker ManagementUnparalleled BitLocker Management

We are always looking ahead and building solutions that continue protecting our customers well into the future and SecureDoc offers the best solution in the industry for managing BitLocker deployments. Organizations can take advantage of the built-in encryption offering and increase the security by adding SecureDoc’s unique layers of authentication support whether it’s Pre-boot network authentication or multi-factor authentication.

Seamless Upgrade

When the time comes and your business requires centralized management and control, you can seamlessly transition your licenses with minimal impact to the end-user. If you are looking for a solution to environments that manage ten devices or more, upgrade from SecureDoc Standalone to SecureDoc Enterprise Edition managed by SecureDoc Enterprise Server (SES).

SecureDoc for Windows Standalone Edition

Unmanaged solution for small businesses
Industry-leading Full-Disk Encryption for Windows PCs
Multi-factor authentication at pre-boot and Removable Media Encryption
File & Folder Encryption option available
Support for Windows 8* and Windows 10*
FIPS 140-2, Common Criteria EAL4, BITS, AES validation

Delivering the best full disk encryption for small business

WinMagic SecureDoc Standalone Edition offers powerfully simple and seamless encryption solutions that protect data and people without getting in the way of productivity and innovation. SecureDoc allows businesses to deal with the security of their IT environment efficiently leveraging features including: Full Disk Encryption (FDE), Multi-Factor Authentication, Removable Media Container Encryption (RMCE) and File and Folder Encryption (FFE). These components help small businesses meet government and regulatory requirements that are mandated for their business sector.

SecureDoc Standalone for Windows Advantages

  • Enterprise class security for individual PCs
  • Seamless upgrade to Enterprise Edition when required
  • Flexibility & Control over how and what you share and who can see it
  • Secure network folders from prying eyes with File & Folder Encryption
  • Reduce overall risk to your business from loss or theft

SecureDoc is ready to support all of your encryption needs now and well into the future.

SecureDoc is a highly secure, yet flexible encryption solution that works on any device, anywhere. Enabling businesses to comply with privacy and security regulations by protecting sensitive data residing in laptops, desktops and on removable media.

File and Folder Encryption (FFE)

FFE is an upgrade option for SecureDoc Standalone edition. With FFE users can selectively encrypt files and folders on their device, ensuring that specific information that could be highly sensitive and confidential remains that way.

We are dedicated to making the world more secure. But we’re also focused on making that job easier and far more effective. That’s why this full disk encryption solution offers the familiar ‘drag & drop’ feature. Additionally, users can encrypt folders on shared network drives to ensure that data left on the broader network is secured.

For added security and peace of mind, SecureDoc also offers multiple ways for users to authenticate. Whether it’s a password in the pre-boot environment, a fingerprint sensor, smart card, or token. SecureDoc can manage and ensure the authentication requirements you need are available and provide maximum security.

SecureDoc uses a FIPS 140-2 certified AES 256-bit cryptographic engine to encrypt data and is Common Criteria EAL4 certified by the Communications Security Establishment. SecureDoc encrypts the entire hard drive (full-disk encryption) on a sector-by-sector basis.

Learn More


Removable Media Container Encryption (RMCE)

RMCE gives users the ability to not only fully encrypt a USB but create an encrypted container on a removable USB. This differs from traditional removable media encryption since the user isn’t required to encrypt all the files. With RMCE users can effectively create an encrypted partition on the removable media leaving the remainder of the volume unencrypted and free to use for other purposes. When using RMCE a media viewer is also added to the USB drive so that customers or partners that do not use SecureDoc can view, edit, and save the files in the container.

Learn More

SecureDoc Seamless Upgrade

Seamless Upgrade

Your business and business needs will likely change and grow and SecureDoc can keep pace. We’re not just out to solve today’s issues. WinMagic is always looking ahead and preparing for the future accommodating both security and management as your device portfolio grows. Should this need arise that your business requires centralized management and control, you can seamlessly upgrade to SecureDoc Enterprise edition and SecureDoc Enterprise Server (SES). Licenses can seamlessly transition to Enterprise grade with minimal impact to the end user. This will be ideal for environments with ten devices or more to manage and it can accommodate tens of thousands of users. If you also require the ability to manage mobile devices such as smartphones and tablets, SES can handle it as well.

Wired and wireless pre-boot network authentication
File & Folder Encryption
Removable Media Encryption
Removable Media Container Encryption
FIPS 140-2, Common Criteria EAL4, BITS, AES validation
Opal 1 and 2 Self-encrypting drives

The Leading Innovator in Full-Disk Encryption

WinMagic’s SecureDoc Enterprise Edition maintains end user productivity while ensuring full disk encryption and transparency in regular workflow. Whether it’s SecureDoc’s software encryption, or Microsoft’s BitLocker or easily integrating with industry-standard technologies such as OPAL-compliant Self-Encrypting Drives (SEDs), SecureDoc allows businesses to deal with the security of their IT environment efficiently. Additional features available for SecureDoc Enterprise Edition include: PBConnex, Removable Media Container Encryption (RMCE) and File and Folder Encryption (FFE).

SecureDoc Enterprise for Windows Advantages

  • Reduce TCO with PBConnex – less time spent on laborintensive tasks (Password resets, Device Staging etc.)
  • Opal SED Support – manage hardware encrypting drives in mixed environments
  • Supports all version of Windows – Win 10, Win 8, Win 7, Vista, XP
  • BitLocker Management with PBConnex support

For managed environments, IT administrators can leverage the industry leading pre-boot network-based authentication offered through PBConnexTM. PBConnex is the only data encryption and management solution that allows for pre-boot network authentication either wired or wirelessly. PBConnex utilizes network-based resources to authenticate users, enforce access controls, and manage endpoint devices before the operating system loads.

This unique and ground-breaking approach to Full Disk Encryption (FDE) management is cost-effective for organizations by streamlining the time and expenses associated with administrative tasks such as password resets and device staging. Review the WinMagic TCO calculator to see how PBConnex can help reduce your IT network costs today.

Microsoft® BitLocker Support

BitLocker is a commonly used security feature that encrypts data, and SecureDoc BitLocker management helps fill a key gap in this native encryption offering. BitLocker users leveraging SecureDoc Enterprise Sever (SES) management can remove many common encryption headaches that get on the way of your productivity and innovation.

SecureDoc management for Bitlocker delivers:

  • Better control and security for BitLocker through the enablement of strong user authentication and multi-factor authentication. Administrators can leverage existing network log-in credentials (instead of only a PIN) in addition to multi-factor authentication with smart cards or other tokens to lock down system access and guarantee high-level security of devices
  • PBConnex support – SecureDoc allows for pre-boot network authentication – authenticating the users via the local network. This also enables IT managers to reset users’ passwords and make Active Directory role assignments without needing to visit each machine, and without users completing complicated password-challenge-response queries. This saves a dramatic amount of IT time without sacrificing the security of devices.

Opal Self-Encrypting Drive (SED) Support

Self-encrypting hard drives, or SEDs, are fast becoming the standard enterprise solution for protecting data—with strong, easy-to-use security built right into each storage device.

With Opal-compliant SEDs, data encryption, is always on and data access requires authentication however you need a third party solution to enable data protection. That’s where WinMagic’s SecureDoc steps in simplifying SED management, with features that give you complete control over how your data is stored and protected. SecureDoc collects encryption key information from the self-encrypted drive and provides the same central control, escrow and protection offered to its software-encrypted drives.