VH, Seems as though this would be of special interest:
"These use cases require a centralized management platform that can communicate with endpoints.We're aware of only one vendor--Wave Technology--that's shipping a management platform to tie all of this together. Wave uses a "pre-boot" operating system to set up admin and user accounts for unlocking the hard drive's encryption keys before the OS boots, and also has a Windows agent that can sync these accounts with Active Directory".