Custom Disk Encryption Settings; Self-Encrypting Drives - Check Point HARMONY R81 Administration Manual

Custom Disk Encryption Settings

If you select Custom Volume Encryption for the Encrypted disks and volumes setting,
configure the encryption and Pre-boot settings for each volume.
To configure the settings for each volume:
1. In the Custom Volume Encryption Settings window, click Add.
2. Select the disk number and volume number to configure.
3. To enable Pre-boot on the volume, select Pre-boot.
4. To encrypt the volume, click Encrypt.
5. Click OK.

Self-Encrypting Drives

To configure volume encryption settings for Self-Encrypting drives, edit the Volume
Encryption action of the Full Disk Encryption rule.
The disk encryption setting Allow Self-Encrypting Drives (SED) hardware functionality lets
Full Disk Encryption probe and use SED disks that comply with the OPAL standard. If a
compatible system and disk are detected, Full Disk Encryption uses the hardware encryption
on the disk instead of the traditional software encryption.
When using SED drives, do not change the default settings for Encrypted disks and volumes.
The required settings are:
n Encrypt all visible disk volumes
Boot protect hidden disk volumes
l
Encrypt hidden disk volumes
o
When SED encryption is in effect on a client computer, the Drive Information in the
Encryption Status of the client shows SED added to the volume name. You can see this in the
Client UI and in the Computer Details > Full Disk Encryption in SmartEndpoint.
n AES encryption is always used with SED drives.
n You cannot use custom volume encryption with SED drives. The client overrides custom
volume configuration.
n Manage SED drives in the same way as software-encrypted drives.
For SED Requirements, see the Release Notes for your Endpoint Security client version.
Either search the Web for the release notes, or:
Endpoint Security Homepage
1. Open the
2. Go to Detailed Information per Release > Detailed Client Releases Information.
.
R81 Harmony Endpoint Server Administration Guide | 189
Volume Encryption