Drive Encryption

Overview

Drive encryption, also referred to as full disk encryption, is encryption software that helps protect data on Microsoft Windows tablets, laptops, and desktop PCs to prevent the loss of sensitive data, especially from lost or stolen equipment. It is designed to make all data on a system drive unintelligible to unauthorized persons, which in turn helps meet compliance requirements.

Drive encryption is compatible with traditional hard drives (spinning media AKA HDD), solid-state drives (SSD), and self-encrypting drives (SED and OPAL). Drive encryption is managed through the McAfee ePolicy Orchestrator (McAfee ePO) management console.

Key Benefits

• Enforces strong access control with pre-boot authentication.
• Uses military-strength, certified encryption algorithms (FIPS, Common Criteria), and is certified for FIPS 140-2, Common Criteria EAL2+, and Intel Advanced Encryption Standard–New Instructions (AES–NI).
• Enables automatic, transparent encryption without hindering performance.
• Supports mixed device environments, including solid-state drives.
• Supports Trusted Computing Group (TCG) OPAL self-encrypting drives.