HD/SSD with hardware encryption

Dear everyone!
I have a MacBook Pro 13" late 2009. I work on a corporate environment and security is top priority. I would like to know options and recommendations for SSD or Hard Disks with HARDWARE ENCRYPTION that will work with this notebook. I don't want to put extra work on the CPU for encryption.
I assume that doing this will allow me to still backup my notebook at home with Time Machine. By the way, how can I encrypt my backup?
Thanks everyone in advance,
Luis.

The only ones I know of are the Samsung units - rumored to go consumer mid to late 2009.
http://www.xbitlabs.com/news/storage/display/20090417223457Samsung_Ships_Solid_State_Drives_with_FullEncryption.html
http://www.computerworld.com/s/article/9131684/Fulldisk_encryption_comes_to_SSDs_for_mobile_deviceslaptops
In terms of encrypting your backup drive you can use something like PGP. It's software based of course.

Similar Messages

Can anyone recommend a portable USB 3.0 drive with hardware encryption, compatible with OSX and Windows 7. I need it for my MacBook Pro 13", 2012, running Mountain Lion

Can anyone recommend a portable USB 3.0 drive with hardware encryption, compatible with OSX Mountain Lion and Windows 7. I need it for my MacBook Pro 13”, 2012, running Mountain Lion & Windows 7 Ultimate - BootCamp. I’ve heard that the Buffalo MiniStation Encryption does not work with OSX, is that true..? I'd like it to work with both operating systems, using the built in hardware encryption. Thanks

This article may help: A flashing question mark appears when you start your Mac.

Comparison of SSD with hard disk drives

Attribute or characteristic
Solid-state drive
Hard disk drive
Spin-up time
Instantaneous.
May take several seconds. With a large number of drives, spin-up may need to be staggered to limit total power drawn.
Random access time[45]
About 0.1 ms - many times faster than HDDs because data is accessed directly from the flash memory
Ranges from 5–10 ms due to the need to move the heads and wait for the data to rotate under the read/write head
Read latency time[46]
Generally low because the data can be read directly from any location; In applications where hard disk seeks are the limiting factor, this results in faster boot and application launch times (see Amdahl's law).[47]
Generally high since the mechanical components require additional time to get aligned
Consistent read performance[48]
Read performance does not change based on where data is stored on an SSD
If data is written in a fragmented way, reading back the data will have varying response times
Defragmentation
SSDs do not benefit from defragmentation because there is little benefit to reading data sequentially and any defragmentation process adds additional writes on the NAND flash that already have a limited cycle life.[49][50]
HDDs may require defragmentation after continued operations or erasing and writing data, especially involving large files or where the disk space becomes low. [51]
Acoustic levels
SSDs have no moving parts and make no sound
HDDs have moving parts (heads, spindle motor) and have varying levels of sound depending upon model
Mechanical reliability
A lack of moving parts virtually eliminates mechanical breakdowns
HDDs have many moving parts that are all subject to failure over time
Susceptibility toenvironmental factors[47][52][53]
No flying heads or rotating platters to fail as a result of shock, altitude, or vibration
The flying heads and rotating platters are generally susceptible to shock, altitude, and vibration
Magneticsusceptibility[citation needed]
No impact on flash memory
Magnets or magnetic surges can alter data on the media
Weight and size[52]
The weight of flash memory and the circuit board material are very light compared to HDDs
Higher performing HDDs require heavier components than laptop HDDs that are light, but not as light as SSDs
Parallel operation[citation needed]
Some flash controllers can have multiple flash chips reading and writing different data simultaneously
HDDs have multiple heads (one per platter) but they are connected, and share one positioning motor.
Write longevity
Solid state drives that use flash memory have a limited number of writes over the life of the drive.[54][55][56][57] SSDs based on DRAM do not have a limited number of writes.
Magnetic media do not have a limited number of writes.
Software encryption limitations
NAND flash memory cannot be overwritten, but has to be rewritten to previously erased blocks. If a software encryption program encrypts data already on the SSD, the overwritten data is still unsecured, unencrypted, and accessible (drive-based hardware encryption does not have this problem). Also data cannot be securely erased by overwriting the original file without special "Secure Erase" procedures built into the drive.[58]
HDDs can overwrite data directly on the drive in any particular sector.
Cost
As of October 2010, NAND flash SSDs cost about (US)$1.40–2.00 per GB
As of October 2010, HDDs cost about (US)$0.10/GB for 3.5 in and $0.20/GB for 2.5 in drives
Storage capacity
As of October 2010, SSDs come in different sizes up to 2TB but are typically 512GB or less[59]
As of October 2010, HDDs are typically 2-3TB or less
Read/write performance symmetry
Less expensive SSDs typically have write speeds significantly lower than their read speeds. Higher performing SSDs and those from particular manufacturers have a balanced read and write speed.[citation needed]
HDDs generally have symmetrical read and write speeds
Free block availability andTRIM
SSD write performance is significantly impacted by the availability of free, programmable blocks. Previously written data blocks that are no longer in use can be reclaimed by TRIM; however, even with TRIM, fewer free, programmable blocks translates into reduced performance.[25][60][61]
HDDs are not affected by free blocks or the operation (or lack) of the TRIM command
Power consumption
High performance flash-based SSDs generally require 1/2 to 1/3 the power of HDDs; High performance DRAM SSDs generally require as much power as HDDs and consume power when the rest of the system is shut down.[62][63]
High performance HDDs generally require between 12-18 watts; drives designed for notebook computers are typically 2 watts.

I wish I could get my head round the SSD vs HDD with a NLE rig. My builder is trying to persuade me to use a Toshiba 256Gb THNSNC256GBSJ for OS and programs, and it is only NZ$20 more expensive than the 450Gb 10k rpm VelociRaptor I was originally planing to use for the OS. That sounds suspiciously cheap to me, and I am concerned about the finite writes to SSD - mainly because I don't really understand it.
The rest of the new build is
3930K
Gigabyte X79-UD5
8 x DDR3 1600
Coolermaster with 750W PSU
Geforce GTX570
I plan to transfer the drives from my current system as a starting point, and reassess after giving it some use. That means
Either the above SSD or 450Gb 10k Raptor for OS (new drives)
300Gb 10k rpm Raptor (currently used for OS in old box)
150Gb 7k4 rpm Raptor (reserved for Photoshop Scratch in old box)
2 x 1Tb WD Blacks (data drives)
2 x 1Tb WD USB3 externals
I don't know how I would configure the drives in the new box, but have seen Harm's table and will try to follow his advice. It's a dreadful thing to admit, but I don't have a backup strategy, and the above drives are well over half full. Well over! And I am only just getting serious about video, (the rest is mainly CR2 files from my Canon 1Ds3 and 1D4)
I know it must be like banging your head against the wall, but should I avoid that SSD and go with the 450G Raptor? I have read a comment that the WD Blacks don't work well as Raid0. Is that BS or true?
I am about to give the go-ahead so need to confirm the spec.

The Advantages of Hardware Encryption

If you're looking for instructions on how to use the Hardware Encryption feature of Crucial SED's, Brad_TheCru has posted a video and a written a guide to using BitLocker with Crucial SED
An SSD that has encryption built into the hardware is more commonly referred to as a Self-Encrypting Drive or SED. This means the encryption is done by the controller on the drive, supported by a set of instructions in the firmware. There are several advantages to using hardware encryption rather than software encryption on SSDs.
The first advantage is that the encryption feature is optimized with the rest of the drive. If a user applies software encryption to a storage drive this adds several extra steps to the process of writing to the drive, since the data needs to be encrypted by the encryption software while it is being written. That same data then needs to be decrypted by the software again when the user wants to access it, which slows down the read process. In other words, adding a layer of software encryption negatively impacts the performance of an SSD. The hardware encryption of an SED is integrated into the controller, which means there is no impact on SSD performance either in the short term or in the long run. The read and write speeds are already taking encryption into account, since it already happens on every write cycle and decryption happens on every read cycle. The encryption is simply a part of the drive’s normal operation.
This in turn has several advantages. To begin with, since the encryption is a part of the drive’s controller it provides pre-boot data protection. Running a software utility to try and break authentication codes is not a possibility since the encryption is active before any software has started to load. Another advantage of an encryption feature that is active at all times is that this makes it possible for the drive to meet the compliance requirements of government standards for data in banking, finance, medical, and government applications, by adhering to TCG Opal 2.0 specifications and IEEE-1667 access authentication protocols. Crucial SEDs also support the standard full disk encryption protocol through the ATA-8 security command feature set.
Lastly, since the encryption takes place on the SED and nowhere else, the encryption keys are stored in the controller itself and never leave the drive.
All a user needs to take advantage of an SED’s encryption ability is a software utility that provides encryption key management for SED devices. Crucial SEDs are fully compliant with Microsoft’s eDrive standard, which provides simple plug-and-play data security through the use of Windows 8 BitLocker. Since Windows 8 BitLocker doesn’t need to encrypt the drive before it can be used (that has already been done by the SSD’s controller) there is no delay or wait for encryption to take place. Once Windows 8 BitLocker is enabled the SED is instantly ready to use. All you have to do is let the Self-Encrypting Drive operate just the way it has all along, and enjoy the peace of mind and high performance of a hardware-based encryption drive.
Looking for more information on Crucial SSDs? Learn more here!
Looking for Customer Service? Contact Crucial Support for your region.

There won't be any compatible processes left over from the previous installation (unless you put them back later). The same is true if you prepare your existing installation before upgrading it.
Make a backup first, whatever you choose to do.

System Requirements for Hardware Encryption on Crucial SEDs

The majority of current Crucial SSDs are Self-Encrypting Drives (SEDs) which means all data is always encrypted by the controller when written to the NAND and decrypted when read. Windows 8 BitLocker can work with this built-in hardware encryption ability when you apply a password in Windows, provided the following requirements are met:
•   BitLocker only supports TPM version 1.2 and 2.0 (or newer). In addition, you must use a Microsoft-provided TPM driver (Please note, BitLocker can also work without a TPM, but it will need a USB flash drive to set the password instead)
•   The system needs to support UEFI 2.3.1
•   Make sure UEFI boot is enabled and you have a UEFI enabled Windows 8 installed
•   The computer must boot natively from UEFI.
•   The boot order must be set to start first from the SSD (not the USB or CD drives)
•   Dynamic discs are not supported by BitLocker
•   The SSD must have two partitions (drives with Windows installed generally do anyway) and the main partition to be encrypted must be NTFS
•   Ensure ATA Security features, for example Secure Boot, are disabled in the BIOS. The M500 supports either ATA Security or TCG Opal (which is needed for SED) but not both.
•   The system needs to support Opal 2.0 The Opal 2.0 standard is not backwards compatible; Crucial SEDs are not compatible with Opal 1.0
•   The computer must have the Compatibility Support Module (CSM) disabled in UEFI.
Looking for more information on Crucial SSDs? Learn more here!
Looking for Customer Service? Contact Crucial Support for your region.

i'm very glad to read, from the article you referenced, that there's no performance hit. but that's only 1 of 2½ issues. i have some follow-up questions. perhaps we should take this to a forum instead of the knowledge base?
-what about prior issue #2 (securely wiping the drive)? is this easily and instantly doable? we'll ignore #3 (relying on microsoft gets ½ a point).
-with the encryption keys stored on the controller, doesn't using third-party encryption software mean the keys themselves aren't encrypted by a user pw, making it that much easier for someone with physical access to the drive to extract them from the firmware?
-if the controller is doing the encryption, why bother with bitlocker? is it so slightly-more-savvy-than-average joe can easily enable it, or so you don't have to write it into the firmware? (i'm being serious, not snarky--i'm a software developer myself.) personally, i'm dual-booting win7* and ubuntu 14, which means i need 2 separate encryption methods instead of just supplying my credentials at boot to decrypt the hd and then choosing which os to load.
-also, if i upgrade the windows os, ms requires the os volume to be decrypted first. this would obviously not be the case if windows was unaware that it was encrypted.
*last, what about those poor silly saps who are running win7 (or earlier)? i just read that win7 bitlocker doesn't support self-encrypting drives--it was an update as of win8. we're just out of luck? i realize you can't support everything, but win7 is still a ms-supported os, and it seems like a better service to (more of) your customers to enable full-disk encryption all the time.
thank you!

T440s - implementing hardware encryption on the OPAL compliant HDD

I just recently received my new T440s which I ordered with Windows 7 Professional and a 500GB HDD w/OPAL. I choose the OPAL drive so that I could implement encryption at the hardware level. I can't find information on how to implement/activate encryption on this drive in the User Manual.
1) Does anyone know how to do so and where the instructions are located?
2) My other question is regarding the 16GB M.2 Solid State Drive and the M.2 slots that comes with "most" T440s. I didn't noticed till after I had placed my order that when I chose the OPAL compliant drive, this 16GB M.2 SSD disappeared from my configuration. Also least on my configuration there was no "third" M.2 card slot included.
If I run a new T440s configuration today on the Lenovo website and choose the OPAL compliant drive, the 16GB M.2 SSD disappears but the "3rd M.2 SSD Slot" remains in the configuration.
My question is can I install a 16GB M.2 SSD in my laptop at all? or does having a hardware encrypted drive (which I don't know is even encrypting at this point) prevent me from using this cache? configuring a new T440s today seems to include at least the third M.2 slot so it sounds like one should be able to install an SSD there.
thanks
archie
Solved!
Go to Solution.

The 512GB option in current ThinkPads is not OPAL.
ATA-Security without encryption means that you must provide the password to the SSD's controller before the controller itself will provide access to the NAND chips (although the data on the NAND chips is not encrypted). In theory it is possible to replace the password-locked controller with an unlocked controller and then get access to the data that way. But I think it would take an NSA lab (or similar) to do this type of hardware hacking.
Another option is to just use software encryption like BitLocker. On an SSD system, it is very fast and you won't notice a performance decrease in any real-world usage.

About Hardware encryption AES 256 bit crucial mx100

My question works it automatically or works the hardware encryption windows only ?
because not sure is it safe enough and also about speed.
sorry for my terrible English. You can answer in German and English thanks.
Meine Frage ist ... ob die Hardware Verschlüsselung automatisch vom Controller crucial mx100 gesteuert wird oder funktioniert es nur unter Windows ?
es muss ich filevault benutzen um die Daten zu schützen ?

Hardware encryption is a feature of SSD's. It is transparent to the user and you don't have to do anything to enable it. The data on the SSD is encrypted with a random key. When you erase the device, the key is destroyed. You can't use hardware encryption to protect your data from theft. For that, use FileVault.

Unable to use Intel 530 SSD with M5400

Hello!
I finally decided to write over here, after reading and viewing a lot of forums lately on this subject.
Context:
I have an Lenovo M5400 (but don't think this is definitory to the problem, as I've seen that the same simptoms seem to exist to other lenovo models as well) with the SSHD drive. I bought an Intel 530 SSD (don't think the brand mathers either) and wanted to replace the SSHD with it.
Upon replacing the original drive with the SSD, in order to make a clean windows install, the Windows 8 installer is unable to correctly detect my drive.
The drive is visible in the BIOS (at times?!) and seems to interfere somehow with the booting process, as sometimes, the boot stucks with a blank screen and the green light of the drive is on permanently. (this doesn't happen all the time).
What I tried:
1) At first, I had the drive unitialized: no GPT or MBR, no partitions on it. I tried to install it as such, but failed. It was not visible to the Windows installer, only in BIOS, in the boot order, I could see it. This was done in BIOS legacy mode.
2) I tried loading drivers in the Windows installer, via the "Load driver" option, when you get the message "W couldn't find any drives" or something like that. That was unsuccessful with the following: a) lenovo ahci drivers, from the online driver store, b) my previous windows drivers, which I took on a USB stick, c) some drivers from intel site.
3) At this point, the Intel firmware update bootable tool was not seeing my drive either.
4) I then initialized my drive by connecting it via a SATA-to-USB cable to my computer and repeated step 2), with no success still. I initialized it as MBR but I doubt that initializing it as GPT would have made a diffrence. I tried both with creating a primary and active partition and with leaving the drive initialized with all the space unallocated. No success.
5) I tried to update lenovo BIOS, because I suspect it's the cause of the problem, but was unable to do so. Downloaded the bios utility but it gives me an error "Bios folder ... ". With the bootable bios cd, it doesn't work: it doesn't boot. Has anyone managed to flash a newer bios? There is one posted on 09/30/2013 on the site, and my current one is 09/26/2013, as shown in BIOS.
6) I then fiddled with various BIOS modes: uefi, legacy, both with priority, but with no success.
At one point, I managed to see the drive in the windows installer, it was in UEFI mode only, with WIn 8 Optimized defaults ( I think) but I feared that it was just a single happening and didn't do anything, instead tried to see which settings worked in order to be able to reproduce this. I completly lost my chance, as after that, I didn't see the drive again in the windows installer. When it worked, I didn't have to load any driver. It saw it as MBR and prompted to format is as GPT, in order to use with UEFI booting.
The things I noticed:
On some occasions, in the bios boot order menu, the drive is identified as an Intel ssd, and on others just as an generic ATA HDD. I think there is a bad link between those two. When I reboot, restart, on some occasions I see it as the Intel drive and on others as the generic one. I think that in the case of generic drive, the windows installer has no chance on recognizing it.
When it is seen in the bios though, I get all sort of problems when trying to boot a CD or USB, as it seems to ignore them and get stuck in the boot process. I think that in this situations it correctly detects the SSD, if I were to look in the BIOS. But when I try to boot the CD or the USB in these situations, it just stucks with the green drive light permanently on, and with the CPU working on something ( I hear the fans starting) and the boot stops here indefinetly. I have to restart, and then, depending on the case, I get the same results, or I can boot the CD but don't find the drive.
I don't know by what chance I managed to "capture" it once in the windows installer but think this should be the common case.
After all these, what I suspect is that the Lenovo BIOS is broken somehow. It messes up with the boot order, because although I have priority for the DVD, the boot gets stuck on trying to do something with the SSD, as described above.
I am in the situation of returning the SSD back to the shop, as it is unusable with the current Lenovo m5400 motherboard/bios or whatever other hardware interferes with making it properly work ( ahci controller?).
I am very upset by this, and have seen that on these very boards, there are other posts as well, not on this model, but on other lenovo models, with the same scenarios and simptopms as mine, which didn't get any solution.
So, is there an answer to my problem? To update the BIOS? How to make the BIOS to not mess up with the boot order and get stuck? I tried all the possible combinations with no success and it's really frustrating.
Another update:
A lot of people seem to be having problem with the particular Intel 530 SSD. So this issue may not be related only to the motherboard/bios. I will post links to the corresponding threads from the intel boards:
https://communities.intel.com/thread/49389?start=15&tstart=0
https://communities.intel.com/thread/52959
https://communities.intel.com/thread/51111
Does anyone have any idea or hint if using other software for initializing the SSD than Computer Management/diskpart is of any help? Like EASUS partition manager or Gparted? Maybe the disk isn't partitioned correctly.
The disk isn't detected as an Intel SSD with the SATA-to-USB cable, instead being masked by it. Maybe this is another problem?

Hello! I have the same problem as you.
I tried to connect OCZ Vertex 2 60GBSSD but I failed. It has the same conntroller SandForce but the older generation.
Maybe that's the problem?
I was unable to install it on Windows 8.1, when I switched to the BIOS to ACHI mode Capability mode. But later he again loaded with it, then the BIOS will not see it to be.
I think the problem in the BIOS! I have 2.03 the latest.

Proper way to migrate OS to new SSD with mSSD cache Intel RST installed ?

Hi everyone,
I have a laptop hp envy dv6 7300 CTO.
it has 750 GB SATA with 32 GB mSSD for Intel RST cache now.
Right now, I am purchasing 500 GB SSD to upgrade my HDD so I guess I do not need intel RST to work with my new SSD.
I am not sure about how to disable intel RST cache properly (without damaging OS)
I think
1. Backup my important data
2. Disable Intel RST in laptop BIOS , just change from <enable> to <disable> and hope system will resolve everything.
3. make sure system run in AHCI mode, check boot order
4. Boot to windows , make sure everything work fine (should see new 32 GB drive) uninstall intel RST driver stuff.
5. Clone HDD to new SSD
6. install SSD to laptop , set boot order
Am I correct about process ?

Erico has a guide on moving to SSD ,with several methods:
http://h30434.www3.hp.com/t5/Hardware-Upgrades-Replacements/How-to-upgrade-your-notebook-to-a-SATA-2...
******Clicking the Thumbs-Up button is a way to say -Thanks!.******
**Click Accept as Solution on a Reply that solves your issue to help others**

Hardware Encryption on 3GS

Ok, maybe I am missing something but... is this on by default and not able to disable or is there a way to enable this? Being in a hospital environment we would need to verify or be able to prove that hardware encryption is in fact on and working. I manage a BES environment now, and I have a corporate policy set to enable hardware security on all of our Blackberry devices. I have been through the 3GS with a fine tooth comb and can not locate anywhere to enable/disable the encryption. Any info would be greatly appreciated.

As I understand it:
- Hardware encryption of the entire flash memory is enabled by default on all iPhone 3GS
- There is currently no way of accessing the encryption key, it seems to be generated by the phone, and is only stored on the phone itself. The only way to get a new key is to do a complete device erase.
- The encryption is transparent, that means that someone with access to the phone could use it, access the data, and even by jail braking would be able to transfer all the data. To all applications running on the phone, it looks like nothing is encrypted.
- You need to rely on the iPhone OS to prevent unauthorised access to any data. So you need to trust it that it has no vulnerabilities (tough when Apple is not using the current state of the art, as buffer overflows are completely avoidable, and the 3GS can still be jail broken) and you need to make sure that physical access to the device is prevented by setting up a pass code.
- As explained above you will need to set up iTunes to encrypt the backup it generates, otherwise this would be backdoor into the iPhone device data.

Should I install SSD with clone copy or fresh OS X?

This may be rather complicated, but here it goes:
A few years ago I installed Mountain Lion on my MacBook Pro (early 2011) which had Snow Leopard previously. The result was my quick and nimble Snow Leopard turned into a dog slow, crash and freeze up prone Mountain Lion. I took my machine to the Apple store 3 times, no hardware problems were identified and no remedies given.
I limped along until Mavericks came along. Mavericks gave me no improvement.
In my last visit to an Apple store, they suggested a clean install of OS X. I have now purchased an SSD drive. If I install the SSD with a clone copy of my SATA drive, I may have faster performance but still have the inherent problem due to the file structure/OS X installation on my SATA, which I think only gets fixed with a clean OS X install. That would mean manually re-installing all applications and copying all files back. I am concerned with the risk involved in doing so; if I mistakenly omit a file it could be a disaster.
So here are my options as I understand them:
- Install the SSD with a clone copy of the SATA drive, which may gives some better performance but still suffer from the inherent file and software installation problems of my SATA drive
- Install the SSD with a clean install of Mavericks and carefully/tediously re-install all applications and manually copy files
Any recommendations out there?

Thank you for the response. I think I found a much easier way to do this:
1. Connect the SDD via USB. It will prompt you to Initialize, which calls up Use Disk Utility to erase and name the new SDD drive
2. Download Mavericks installer from the Apple Store, which is somewhat non-intuitive but you have to select Continue to get it to download
3. When it is done downloading it automatically asks to install Mavericks, say yes and proceed to where you can select the option to show all drives. Select your new SDD drive. It will reboot and then proceed with installing Mavericks on the new SDD, takes about 24 minutes
4. After installing Mavericks it reboots and then asks to transfer files from a Mac. Say yes and proceed to copy everything from the SATA in the machine to the SDD connected by USB. I did encounter a transient error along the way which does appear to be significant. Also, it may prompt to setup a new Mac account, which I did erroneously. However, the previous account is preserved.
5. When all this is done I replaced the internal SATA with the SDD and booted up. Everything works great (so far). All files, settings are preserved, it is much faster.
I think this is a much easier, faster, less intimidating, and fool proof way to replace a SATA with an SSD while installing a fresh OS X
By the way, the recommended procedure I have seen for enabling TRIM are the following commands:
sudo cp /System/Library/Extensions/IOAHCIFamily.kext/Contents/PlugIns/IOAHCIBlockStorag e.kext/Contents/MacOS/IOAHCIBlockStorage /System/Library/Extensions/IOAHCIFamily.kext/Contents/PlugIns/IOAHCIBlockStorag e.kext/Contents/MacOS/IOAHCIBlockStorage.original
sudo perl -pi -e 's|(\x52\x6F\x74\x61\x74\x69\x6F\x6E\x61\x6C\x00{1,20})[^\x00]{9}(\x00{1,20}\x5 4)|$1\x00\x00\x00\x00\x00\x00\x00\x00\x00$2|sg' /System/Library/Extensions/IOAHCIFamily.kext/Contents/PlugIns/IOAHCIBlockStorag e.kext/Contents/MacOS/IOAHCIBlockStorage
sudo touch /System/Library/Extensions/
Do those look right?

SL500 - Enabling Hardware Encryption for Tape Drives

I have a SL500 with seven HP StorageWorks LTO-4 Ultrium 1840 tape drives. These tape drives have hardware encryption capabilities and several ways to configure the encryption settings.
In the white papers for the HP LTO-4 encryption technology (http://h71028.www7.hp.com/ERC/downloads/4AA1-4878ENW.pdf), all possible ways to manage the encryption settings are listed. One possibility, native mode encryption, is mentioned: "This method controls the LTO4 encryption from within the tape drive library. There is one key that is set by way of the library management interface (Web GUO or Operator Control Panel). This method encrypts all tapes with the same key, with the downside of negatively impacting the security level."
Does the SL500 provide any to do this?

We just got an SL500. When the Sun engineer was onsite, he mentioned an encryption capability. The way he explained it, there is an optional chip that needs to be purchased, as well as an encryption server. Once this is in place, encryption is easily done. If you were to have the same setup at a DR site, the encryption server would auto search for the encryption key whenever the tape is read. Seems to be a good system, but I have no experience with as we do not have that policy....yet
HTH

3750x to 3750x hardware encryption

Hello,
I have a WAN link running at 10GB thru the Fiber Module on my 3750X.
Each datacenter has 1 3750x switch stack, with 10GB WAN link between the 2 datacenters.
I want to encrypt the WAN connection, but I want to use Hardware Encryption.
Is this possible, and what module do I need to purchase?
Thanks...

http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-3750-x-series-switches/product_bulletin_c25-688868.html
See the SKU at the bottom of the page.

Hardware encryption not compliant

My company uses MaaS360 for MDM purposes. I have a customer who updated his Nokia Lumia 625 to Windows Phone 8.10. As a result of update, MaaS360 is indicating that compliancy is not met with either Device Passcode or Hardware encryption. Any
additional add-ons needed or what is general recommendation?

Is it possible MaaS360 is not aware of Windows Phone 8.1? 8.1 continues to support device encryption and PINs of course.

How do I troubleshoot a blue screen on a Pavilion dv4-1123us with "hardware malfunction call hardware vendor for support" message?

I keep getting this screen and before I have to call and pay and wanted to see if there was something that I could do.
Pavilion dv4-1123us get blue screen with "hardware malfunction call hardware vendor for support"
This question was solved.
View Solution.

I would say its just a conicidence and recommend you to do a system restore. As its an intermittent problem, you never know if you face same issue once again.
//Click on Kudos and Accept as Solution if my reply was helpful and answered your question//
I am an HP employee!!

HD/SSD with hardware encryption

Similar Messages

Maybe you are looking for