This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Full Disk Encryption vs Encrypt whats in use

I have a question about Full Disk Encryption vs Encrypt whats in use.  I recently tested the "Encrypt whats in use" which took about 4 hours to encrypt on my test PC.  But i was left wondering if the disk continues to encrypt as it grows or not?  I figure Full Disk encryption will do exactly that.  Encypt the used and unused space no matter what.  But the other setting has me worried that it is lacking in coverage.  Otherwise why have to two different options?

:57101


This thread was automatically locked due to age.
Parents
  • Hello kire,

    "Encrypt whats in use" which took about 4 hours

    it's called Fast Initial Encryption for a reason. The time needed for encrypting a disk is roughly directly proportional to its size. Thus on a 500GB disk with a freshly installed Windows 7 or 8.1 (about 20GB) FIE will save you more than 90% of time for initial encryption (4 hours suggests that there's more than the OS on your test PC).

    if the disk continues to encrypt as it grows or not?

    While FIE encrypts only allocated (i.e. in use) sectors all new data written will be encrypted whether the sector was previously allocated (and therefore encrypted) or not.

    why have to two different options?

    As mentioned above, FIE takes considerably less time. It is only "safe" though on volumes which do not yet contain any sensitive data at all (ideally just the OS) as the unallocated sectors likely contain previously deleted but unencrypted data. 

    Christian  

    :57114
Reply
  • Hello kire,

    "Encrypt whats in use" which took about 4 hours

    it's called Fast Initial Encryption for a reason. The time needed for encrypting a disk is roughly directly proportional to its size. Thus on a 500GB disk with a freshly installed Windows 7 or 8.1 (about 20GB) FIE will save you more than 90% of time for initial encryption (4 hours suggests that there's more than the OS on your test PC).

    if the disk continues to encrypt as it grows or not?

    While FIE encrypts only allocated (i.e. in use) sectors all new data written will be encrypted whether the sector was previously allocated (and therefore encrypted) or not.

    why have to two different options?

    As mentioned above, FIE takes considerably less time. It is only "safe" though on volumes which do not yet contain any sensitive data at all (ideally just the OS) as the unallocated sectors likely contain previously deleted but unencrypted data. 

    Christian  

    :57114
Children
No Data