Full Disk Encryption (FDE) - Revision history

Vrossum: /* Disadvantages */

2010-10-04T08:18:45Z

‎Disadvantages

2010-10-04T08:18:27Z

‎Disadvantages

2010-09-22T09:48:51Z

‎Disadvantages

2010-09-21T21:50:58Z

‎added section on disadvangages

2010-04-05T18:47:11Z

Removed hint line as it contained por grammar and made no sense

2008-09-18T04:29:57Z

‎Links

2008-09-18T04:26:48Z

‎Using Segate FDE

2008-08-18T20:47:11Z

‎TPM

2008-08-18T20:44:24Z

‎TPM

2008-02-08T22:35:08Z

‎Full Disk Encryption: "base(d)

@@ Line 49: / Line 49: @@
 Another disadvantage is that the disk can not be read if it is put in a USB enclosure.
-Again, dm-crypt does allow to mount encrypted partitions from a USB disk (password protected, of course), which is useful when upgrading disks.
+Again, dm-crypt does allow to mount encrypted partitions from a USB disk (password protected, of course), which is useful when upgrading disks, or when using disks across computers.
 === Software alternatives ===

@@ Line 46: / Line 46: @@
 This can be seen as a security risk.
-dm-crypt solutions are better in this respect as they will prompt for a password on the reboot.
+Dm-crypt solutions are better in this respect as they will prompt for a password on any reboot.
 Another disadvantage is that the disk can not be read if it is put in a USB enclosure.

← Older revision		Revision as of 09:48, 22 September 2010
Line 47:		Line 47:

	dm-crypt solutions are better in this respect as they will prompt for a password on the reboot.		dm-crypt solutions are better in this respect as they will prompt for a password on the reboot.
		+
		+	Another disadvantage is that the disk can not be read if it is put in a USB enclosure.
		+	Again, dm-crypt does allow to mount encrypted partitions from a USB disk (password protected, of course), which is useful when upgrading disks.

	=== Software alternatives ===		=== Software alternatives ===

@@ Line 39: / Line 39: @@
 It should be possible to use TPM (with fingerprint readers...) not tested yet.
 * T61 with TPM & fingerprints, FDE password works with a configured fingerprint but you must use windows based software to program the imprint. By keeping a small windows partition, I am able to boot linux with a fingerprint, fingerprint passes the TPM power-on password AND the FDE disk 1 password, which is separate.
 === Software alternatives ===

← Older revision		Revision as of 18:47, 5 April 2010
Line 6:		Line 6:
	Lenovo's 'Full Disk Encryption' (FDE) is a technology incorporated into some of Seagate's FDE-ready hard disks. It provides encryption of all of the contents of the hard disk.		Lenovo's 'Full Disk Encryption' (FDE) is a technology incorporated into some of Seagate's FDE-ready hard disks. It provides encryption of all of the contents of the hard disk.

−	~~{{HINT\|This page have been written based on commercial documentation. It should be reviewed based on real life experience}}~~

	=== Features ===		=== Features ===

@@ Line 46: / Line 46: @@
 === Links ===
 * [http://www.seagate.com/www/en-us/products/laptops/momentus/momentus_5400_fde.2/ Seagate MoMentuS 5400 FDe.2]
 * [http://en.wikipedia.org/wiki/Full_disk_encryption Wikipedia - Full disk encryption] (why FDE ??)
-* http://www.xml-dev.com/pipermail/fde/ - Full-Disk-Encryption Mailing list
+* [http://www.xml-dev.com/pipermail/fde/ Full-Disk-Encryption Mailing list]

@@ Line 22: / Line 22: @@
 |}
-=== Using Segate FDE ===
+=== Using Seagate FDE ===
 Using FDE as as easy as setting up the hard disk password (from BIOS). You can choose to have just a user password, or both a user and a master password.
 You can export the key to an external storage, for password recovery (you need the password !!)
 ==== Lost password ====
 Three possibilities :
 * Use the master password to change the user key.
-* Recover the password using the previously exported key.
+* Recover the password using the previously exported key. (See note from Lenovo FAQ, above.)
 * Reset the encryption key (which causes the hard disk to be instantly "wiped", and resets the "hard disk password").

@@ Line 6: / Line 6: @@
 Lenovo's 'Full Disk Encryption' (FDE) is a technology incorporated into some of Seagate's FDE-ready hard disks. It provides encryption of all of the contents of the hard disk.
-{{HINT|This page have been written base on commercial documentation. It should be reviewed based on real life experience}}
+{{HINT|This page have been written based on commercial documentation. It should be reviewed based on real life experience}}
 === Features ===