Jump to content

  • Log in with Twitter Log in with Windows Live Log In with Google      Sign In   
  • Create Account

Photo

Best way to encrypt all disks...

local disk encryption

  • Please log in to reply
3 replies to this topic

#1 rbutler81

rbutler81

    Advanced Member

  • Members
  • PipPipPip
  • 38 posts

Posted 25 August 2017 - 02:53 PM

Hi there, 

I'm trying to figure out the best way to encrypt all my drives that are part of my DrivePool.

Should I...

 

a -  use CloudDrive to encrypt each disk individually as a 'Local Disk' provider, then add each encrypted drive to the drive pool.

b -  add all the unencrypted drives to the drive pool, then encrypt the entire pool with CloudDrive as a 'Local Disk' and use the encrypted version of the pool

c - use some 3rd party encryption program to encrypt the drives, then add them to the drive pool

d - add all unencrypted drives to the pool, then use 3rd party encryption to encrypt the whole pool

 

If I encrypt a drive with CloudDrive using the 'Local Disk' provider, does this leverage the AES instructions in my processor? Or does it do the encryption in a software layer?

 

Thanks!



#2 Christopher (Drashna)

Christopher (Drashna)

    Customer and Technical Support

  • Administrators
  • 8,208 posts
  • LocationSan Diego, CA, USA

Posted 25 August 2017 - 08:12 PM

Are you using a Pro SKU (Windows 8 Pro, 8.1 Pro, Windows Pro), or a server OS?

 

The reason I ask, is that BitLocker is included in these OS's.  You can use these to encrypt the underlying disks, and still add them to a pool.

 

BitLocker works very well. Especially if you get a TPM module (if your board supports it) and encrypt the system drive.   I actually use this form my desktop, where I use DrivePool for "bulk storage" (games, downloads, Outlook PST files).

And this option is very seamless. 

 

 

Otherwise, there are utilities such as DiskCryptor, which works well.  Though requires you to disable the "Bypass file system filters" option.

 

 

And regardless of what you use, you will need to encrypt the underlying disks, and not the pool itself.


Christopher Courtney

aka "Drashna"

Microsoft MVP for Windows Home Server 2009-2012

Lead Moderator for We Got Served

Moderator for Home Server Show

 

This is my server

 

Lots of "Other" data on your pool? Read about what it is here.


#3 rbutler81

rbutler81

    Advanced Member

  • Members
  • PipPipPip
  • 38 posts

Posted 25 August 2017 - 08:22 PM

Yeah, I'm using Win10 Pro ... should have mentioned that.

I know about the Bitlocker / diskcryptor options... 

 

but what about the 'Local Disk' encryption options from within CloudDrive?

Is that something to consider? Does it use hardware encryption?



#4 Christopher (Drashna)

Christopher (Drashna)

    Customer and Technical Support

  • Administrators
  • 8,208 posts
  • LocationSan Diego, CA, USA

Posted 25 August 2017 - 08:34 PM

You could definitely use that.  But the other options may be better, IMO.

 

As for how the encryption works, yes, it should.  Specifically, we use the Microsoft CNG API, which will take advantage of the AES-NI CPU instructions.  You can read more about it here:

http://community.cov...ive-encryption/


Christopher Courtney

aka "Drashna"

Microsoft MVP for Windows Home Server 2009-2012

Lead Moderator for We Got Served

Moderator for Home Server Show

 

This is my server

 

Lots of "Other" data on your pool? Read about what it is here.






Also tagged with one or more of these keywords: local disk, encryption

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users