Tuesday Tech Tip - Are Self-Encrypting Drives Useful for Data Security?

[@AlienShowz]

Thank you because nobody seems to be covering this topic

[@jokinboken]

This was very informative, thank you. A request - would it be possible in future videos that feature command line work to increase the terminal font a bit (for those of us whose eyesight isn't what it used to be)?

[@RaynaldJadoul]

Great! very interesting and useful 101 introduction.

[@lemmer89]

That was a very nice video, thank you for sharing this knowledge ! As a next step, i would love to see how the encryption key could be stored in a TPM. Such keys indeed deserve to be stored in a somehow secured storage facility. Anyway, thank you so much !

[@-hana7895]

I have a question. the system and the password you deleted and readded are both located on not the SED, correct? Is a on an SED running System possible, and how would the system access the code, to encrypt, as the code is encypted itself? or am i understanding something wrong?

[@Manwha123]

This guy doesn't even come back to answer questions and it's only like 5 comments on this video Btw would you recommend self encrypting key to a literal beginner such as my self?

[@gngui]

Great to know. What's the difference with encrypting the pool which is much easier?

[@sultanofsick]

I'm trying to find out how to use these as a standard consumer on windows. I bought SSDs that specifically advertised hardware encryption like the samsung 980 pro, but I can't for the life of me figure out how to use it. Like you say, the google doesn't return much. Everything is about using bitlocker, which I don't believe is the same as the on-disk hardware encryption.

[@VicharB]

Thank you very much for this brief info. I kinda still find it hard to grasp the soup of TPM, SED, FDE & Bitlocker for Windows, i.e how do I do SED (Samsung 990 Pro) with hardware encryption (no loss of speed) and that of Bitlocker (enable/disable); my wish is to have hardware FDE (using SED feature&) on Linux easily; currently I have Elitebook with TPM 2.0 and OPAL option in UEFI and I have just simply enabled DriveLock feature in UEFI, which is supposed to be SED enabled. Man its a mess/complicated!!! /dev/nvme0 NVMe Samsung SSD 990 PRO 2TB 4B2QJXD7 xxxxxxxxxxxxx Locked = N, LockingEnabled = Y, LockingSupported = Y, MBRDone = N, MBREnabled = N, MediaEncrypt = Y

[@foxbox2879]

Thanks king.

[@b.c.2177]

SED Drives do not need any software for encryption. Some of them need just software for setting a NVMe1 password if the computer BIOS does not support it. Lenovo ThinkPad laptops do not need any software.