Sophos Safeguard Enterprise unsing SED M.2 and SSDs

Hello,

i have browsed through various manuals and searched in the forum but i still don't geit it right in our enviroment.

i have Sophos Safeguard Enterprise Server  8.00.0.280 and now various test clients using SafeGuad Client 8.00.0.251 (newest i could find)

Oux Clients are for now only Laptops. HP ZBook 15 G3 and Lenovo P50 bot using Samsung M.2 950 Pro and SSD 850 Evo for big Data.

I would like to encrypt all local drives using hardware encryption.

Sophos Sales told me it would be possible and using Windows 10 with Bitlocker Encryption i think it should work.

But there are so many issues on what is needed and i just don't get it to work.

I have so far clean installed Windows using UEFI Mode. TPM is working CSM is disabled.

Client installation is done with the OPAL mode MSIEXEC /i SGNClient_x64.msi OPALMODE=0

(Absolutly no clue why this is done so complicated as there are so many advantages using sed. it is as if sophos doesn't want me to use it at all)

aftrer installing the my std policies i am asked for a passphraes to encrypt. all well.

But encryption takes for ever so i doubt it ist using hardware encryption.

What can i do.

Is there a thread by someone who has managed this that i missed?

thank you for your help

regards kai