Full Disk Encryption process
Full Disk Encryption is an effective security measure to safeguard all data stored on a disk. This includes the operating system, user files, applications, and hidden data. Full Disk Encryption achieves this protection by encrypting the entire disk using an AES-256 bit encryption key.
Full Disk Encryption works in:
•Use mode: when the computer is operational, data on the disk is read and written through a driver. During this process, the data is decrypted for access and encrypted again.
•Rest mode: when the computer is off or in hibernation, all data on the disk is “at rest.” At this point, a pre-boot authentication screen ensures that only authorized users can access the data. Without the correct authentication credentials, any attempts to access the data on the disk are ineffective.
Full Disk Encryption provides comprehensive protection for data, both during active use and when the computer is powered down. It acts as an effective barrier against unauthorized access.
Maintain backups Maintain backups of all important data in an unencrypted state. When using Full Disk Encryption, backup software copies individual files and folders in a plain state (not encrypted). |