SSDs and Bitlocker Encryption

Page 1 of 2 12 LastLast

  1. Posts : 247
    Windows 10 Pro version 21H2 (standalone licence)
       #1

    SSDs and Bitlocker Encryption


    Hi

    I have just ordered a new PC that will run Windows 11. Seems that we are beign forced into updating hardware to include the TPM and then it appears that one of the advantages of this is udnermined by the lack of standardised and sound SSD firmware implementation for hardware encryption forcing the revresion to software encryption of SSDs. Have I got that right?


    1. If so, what is the current position. Does Windows 10 now take account of this by defaulting to not trusting SSD hardware encryption firmware therefore allowing bitlocker to encrypt in software? I am assuming whatever the answer is will apply equally to Windows 11.
    2. Assuming bitlocker software encryption still has to be used, can I partition an SSD and encrypt just one partition for mounting at start up and the other for mounting manually as and when required or do two seperate SSDs need to be used to acheive this?
    3. I am curious as to wether same can be acheived with hardware encryption assumign of course it might work as intended on SSDs?


    Thanks in advance for any replies and assistance to understand this. I have not used SSDs before.

    ADDED:

    Edition Windows 10 Pro
    Version 20H2
    Installed on ‎21/‎02/‎2021
    OS build 19042.1466
    Experience Windows Feature Experience Pack 120.2212.3920.0
      My Computer


  2. Posts : 18,432
    Windows 11 Pro
       #2
    Last edited by NavyLCDR; 31 Jan 2022 at 14:05.
      My Computer


  3. Posts : 247
    Windows 10 Pro version 21H2 (standalone licence)
    Thread Starter
       #3

    NavyLCDR said:
    Bitlocker encryption has absolutely nothing to do with whether a drive is self-encrypting or not.

    An Overview of Hardware Encryption | Crucial.com
    I know but this is what I was looking at...? You Can’t Trust BitLocker to Encrypt Your SSD on Windows 10

    ...a dn just wondering if this is is history with regard to SSD firmwares now
      My Computer


  4. Posts : 18,432
    Windows 11 Pro
       #4
      My Computer


  5. Posts : 247
    Windows 10 Pro version 21H2 (standalone licence)
    Thread Starter
       #5

    NavyLCDR said:
    Seen that too and was just wanting to know if this works as expected. Also still trying to understand the difference between a Self-Encrypting Hard Drive and an Encrypted Hard Drive for Windows.

    All new to me. Just buying a system with the following drives and trying to work out how I will encrypt them. As I am buying a new PC to run Windows 11 (as I understand it updated including a TPM) I was hoping that hardware encrytption of these drives could be relied upon.


    • Samsung 970 EVO Plus 500GB M.2 NVMe SSD (3500/3300)
    • Samsung 970 EVO Plus 1TB M.2 NVMe SSD (3500/3300)
    • Samsung 870 EVO 1TB SSD Solid State Drive
    Last edited by kevvyb; 20 Feb 2022 at 17:56.
      My Computer


  6. Posts : 18,432
    Windows 11 Pro
       #6

    According to Samsung, you should use software encryption:
    Consumer Notice | Support | Samsung Semiconductor Global
      My Computer


  7. Posts : 247
    Windows 10 Pro version 21H2 (standalone licence)
    Thread Starter
       #7

    NavyLCDR said:
    According to Samsung, you should use software encryption:
    Consumer Notice | Support | Samsung Semiconductor Global
    Ah, thanks. So being forced to upgrade to TPM in order to be able to run Windows 11 and still can't use that to use hardware encrypted drives instead have to use software encryption which slows the drive down? Wasn't it all meant to work together?

    - - - Updated - - -

    NavyLCDR said:
    According to Samsung, you should use software encryption:
    Consumer Notice | Support | Samsung Semiconductor Global
    Also still trying to understand the difference between a Self-Encrypting Hard Drive and an Encrypted Hard Drive for Windows. Can you explain the difference to me in simple terms? And which of these two apply to the Samsungs I will be using?
      My Computer


  8. Posts : 18,432
    Windows 11 Pro
       #8

    Encryption is far from my specialty. I did find this:
    https://docs.microsoft.com/en-us/win...ted-hard-drive
      My Computer


  9. Posts : 5,048
    Windows 10/11 Pro x64, Various Linux Builds, Networking, Storage, Cybersecurity Specialty.
       #9

    @kevvyb @NavyLCDR

    Hi.

    Just passing by...

    Nearly all Consumer HDD and SSD's are *not* self-encrypting.

    Most higher end HDD's and SSD's can be ordered with self-encrypting hardware built-in.
    However they cost much more and are generally used for specialized enterprise data center purposes.

    Now, BitLocker on W10 may not actually encrypt your data even if you enable it.
    This is because many SSDs physically cannot perform the BitLocker encryption properly.

    Ask the vendor of you SSD if their drive truly supports it in hardware.

    You might be very surprised to learn that the low end ones don't.

      My Computer


  10. Posts : 18,432
    Windows 11 Pro
       #10

    Compumind said:
    Ask the vendor of you SSD if their drive truly supports it in hardware.

    You might be very surprised to learn that the low end ones don't.

    Samsung Magician says my 970 EVO Plus does:

    SSDs and Bitlocker Encryption-capture2.jpg
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:50.
Find Us




Windows 10 Forums