Encryption

Understanding how to protect your data when the systems are running is well understood, but how do you protect your DATA AT REST ?
Encryption prevents unauthorized access to data stored on the hard disk.

There are 4 categories of data at rest security:
1. File encryption
2. Volume encryption
3. Full drive Encryption (software based)
4. Full drive Encryption (hardware based)

In the external Storage solutions market only full drive encryption should be considered, this will deliver:
- Strong encryption
- Strong authentication
- High confidence


Full drive Encryption (software based)

Software DATA AT REST solutions automatically encrypts everything, except the boot track.

Pro’s:
Automatically encrypts
low management overhead

Con’s:
Does not provide data separation
Encryption key exists in host memory


Full drive Encryption (hardware based)

Hardware DATA AT REST solutions automatically encrypts everything, including the boot track.

Pro’s:
Automatically encrypts everything on the media
Hardware based User Authentication
low management overhead
Support software based data separation solutions
The encryption key Never exists in host memory