2 questions re Self Encrypting Drives (SED)

Can the SED be “turned on” with documents and files already on the computer? Are they affected in any adverse way?
I have a laptop with SED that I’m wanting to use in a small work environment that uses a server and network. I’m thinking that since SED protects data at rest, encrypting the drive and using it in the network should not be a problem. Is this correct?

kedaes

Posted 2015-09-05T23:07:33.870

Reputation: 11

"I'm thinking that since SED protects data at rest, encrypting the drive and using it in the network should not be a problem." I don't understand what you mean by that. – David Richerby – 2015-09-05T23:24:11.643

Basically I'm asking if there is a problem using a SED within a network that isn't "sharing the encryption," since it's on the drive. Will the laptop be able to "communicate" with the server if the data is sitting encrypted on the drive and the server isn't encrypted? Does that help my question make sense? – kedaes – 2015-09-05T23:59:14.270

Answers

2) The network will simply communicate as normal with the un-encrypted data. The drive automatically un-encrypts data when your operating requests it (and valid network requests). SED Encryption introduction

Remember SED encryption offers about zero security while the PC is powered on. For it to be secure you need to power the device completely off.

Yes on some drives it looks like you can enable encryption after OS installation. See How do I encrypt Samsung 840 SSD with Bitlocker?

StackAbstraction

Posted 2015-09-05T23:07:33.870

Reputation: 782

Thank you so much for taking the time to answer. 2) Exactly why I wanted it protected--if laptop was taken, sensitive data would not be accessible. – kedaes – 2015-09-09T02:55:44.497

Perhaps my asking this will indicate my lack of understanding the BIOS, but would adding the password after programs and data on comp make all that inaccessible/unreadable? or would it not just be like adding or changing a password?

< – kedaes – 2015-09-09T03:05:06.057

Yes on some drives it looks like you can enable encryption after OS installation. See http://superuser.com/questions/700009/how-do-i-encrypt-samsung-840-ssd-with-bitlocker/700236#700236

– StackAbstraction – 2015-09-10T01:27:36.003

1) I finally rec'd a formal answer from Fujitsu, from whom I rec'd this laptop--Hybrid drive/SED, win7 Pro. This is in regards to encryption on computers that don't require additional software, which is done through the bios. Since it is done outside the OS, it does not affect files already on the computer. The answer given here was correct, but since this wasn't being done through bitlocker or in any way referenced in the response or other answers elsewhere on the site, I wanted to be sure.
2) And as so kindly answered here, there should be no problems when working in a network environment. THANKS!!

kedaes

Posted 2015-09-05T23:07:33.870

Reputation: 11