Talk:Hardware-based full disk encryption
![]() | Computing Stub‑class Mid‑importance | ||||||||||||
|
Bad article
This article is not written in a style suitable for Wikipedia. It looks more like magazine article based on a couple of press releases. There are a lot of terms used but not explained
Examples: FDE, OPAL, Enterprise standards, attack vector, Enterprise SAS, bridge and chipset, Stonewood, Flagstone.
The article should start with an explanation of what the topic is, not from where it's available. Vendor names should be removed, or moved to a less prominent place at the end of the article. There are disadvantages with hardware-based full disk encryption, but they aren't mentioned. Stated facts needs reference.
Questionable facts: "HDD FDE is available ... via the Trusted Computing Group." Perhaps it wasn't the authors's intention that I have to buy such drives via TCG, but it says so.
--HelgeStenstrom (talk) 08:03, 9 September 2010 (UTC)
Merge with Disk encryption hardware
I propose to merge tthis page with Disk encryption hardware, as they are very much related. —Preceding unsigned comment added by 129.215.90.169 (talk) 11:01, 5 May 2011 (UTC)
FDE is only safe with off or hibernated?
I removed this content because it conflicts with my direct experience and it is not sourced. If someone can find a source then we should reconsider it and I can examine why I do not see this in my system.
FDE is only safe when the computer is off or hibernated. When the computer is stolen while it is turned on or suspended, a restart which boots from a USB stick will reveal the data without need for the password. The problem is that these so called warm reboots will not prompt for the HD password, nor the power-on-password for that matter. This is as a security risk. In contrast, software-based encryption will prompt for the password on a warm reboot.
§ Music Sorter § (talk) 03:32, 3 September 2011 (UTC)
I had added this, and I'm disappointed you removed it. It is consistent with my experience on a Thinkpad laptop both X61 and T61. If you do a restart from the OS, i.e. a warm reboot, you are not prompted for the password
THis is indeed what seagate also states.
http://seagate.custkb.com/seagate/crm/selfservice/search.jsp?DocId=205983
When I researched this issue I came across a discussion stating that making the machine prompt for a password with a warm reboot was technically difficult. Maybe this has been improved on recent machines, or it is unique to seagate discs. I have put it back in because I think it is important, but now I have added the references.
— Preceding unsigned comment added by 82.152.207.220 (talk) 22:10, 5 September 2011 (UTC)