I work in a company where encryption is standard on all laptops. One day someone in IT that worked out of a remote office pushed a change to the encryption server. He thought he was testing a change in DEV. He was very, very wrong. The change he made prevented all the laptops from booting up. This affected everyone with a laptop worldwide. Talk about a cluster fuck. Everyone in IT from the Help Desk reps to Developers were dispatched to fix every single laptop in the company. It took almost a week to get everyone back to normal.
Now, there is of course about a million and one things that could have been done to prevent this - better admin controls, better configuration of the encryption server and a better change management process just to name a few. Unfortunately the fact of the matter is this great system that was supposed to protect the corporation brought it to its knees for days.
I’m not saying encryption is a bad thing, But this was slapped it in placed by an arbitrary “mandatory deadline” without understanding the first thing about how to deploy this correctly. If they had taken the time to understand it first this probably wouldn’t have happened.
We still use it. Users still complain about it. Nothing has been done to prevent this from happening again other than the guy that mistakenly pushed the change getting canned.
Doubt is a pain too lonely to know that faith is his twin brother. - Kahlil Gibran