Check Point Disk Encryption for Windows

Ensures that all volumes of the hard drive and hidden volumes are automatically fully encrypted. This includes system files, temporary files, and even deleted files. There is no user downtime because encryption occurs in the background without noticeable performance loss. The encrypted disk is inaccessible to all unauthorized people.

Configuration Options

• Algorithms used
  

  Go to Advanced Settings > Encryption > Choose Algorithm
  

  Full Disk Encryption A component on Endpoint Security Windows clients. This component combines Pre-boot protection, boot authentication, and strong encryption to make sure that only authorized users are given access to information stored on desktops and laptops. Acronym: FDE. can use these encryption algorithms

  • AES-CBC 256 bit (Default)

  • XTS-AES 128 bit

  • XTS-AES 256 bit

• Volumes encrypted
  

  By default, all drives that are detected after the installation and all visible disk volumes are encrypted. IRRT are not encrypted.
  

  Go to Advanced Settings > Encryption > Allow Self-Encrypting Drives (SED) hardware functionality - Lets Full Disk Encryption probe and use SED disks that comply with the OPAL standard. If a compatible system and disk are detected, Full Disk Encryption uses the hardware encryption on the disk instead of the traditional software encryption.

  When using SED drives, leave Encrypt hidden disk volumes checked (which is the default setting)

  • AES encryption is always used with SED drives

  • Manage SED drives in the same way as software-encrypted drives