Self- Encrypting Drives

The disk encryption setting Allow Self-Encrypting Drives (SED) hardware functionality lets Full Disk Encryption probe and use SED disks that comply with the OPAL standard. If a compatible system and disk are detected, Full Disk Encryption uses the hardware encryption on the disk instead of the traditional software encryption.

When SED encryption is in effect on a client computer, the Drive Information in the Encryption Status of the client shows SED added to the volume name. You can see this in the Client UI and in the Computer Details > Full Disk Encryption in SmartEndpoint.

• AES encryption is always used with SED drives.
• You cannot use custom volume encryption with SED drives. The client overrides custom volume configuration.
• Manage SED drives in the same way as software-encrypted drives.

For SED Requirements, see the Release Notes for your Endpoint Security client version.