Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Being that it’s an SSD it’s already encrypting by default. You just have to set the User and Admin password and you’ll have full disk encryption!

You can set HDD/SSD password via the BIOS/UEFI or (my preferred method) using HDPARM —SECURITY commands.

Then if you take the drive out you can unlock it from another computer so as long as you plug it in directly and the UEFI supports HDD/SSD unlocking during post; if not you can install a Pre-Boot authentication on the drive that runs Linux to unlock the drive and then once unlocked it with the PBA it re-boots and it works as a normal un-encrypted drive.

Look into HDPARM and OPAL standard for full disk encryption.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: