If you are really serious about protecting/encrypting data then you need to pony up and move to a biometric solution. Privaris and Cryptometrics teamed up a few years ago to facilitate biometric authentication and encryption into one device. The nice thing about this combination is that they have the ability to separate the key pairs, where one part is on the FIPS certified fob and the other is on the HDD. Thus you avoid the problem with your standard encryption of having both key pairs on the HDD or Chip within the CPU. Give me access to both key pairs and the encryption can be brute forced.

Granted it is pricey, but you won't have to worry about your Sales Representatives or Account Managers taping their login information onto thier laptop because they can't remember the username and password associated with the encryption product. AAAARRRRGGGHHHH!!!!