HP Client Security Commercial Managed IT Software

25
HP Drive Encryption
HP Drive Encryption (HPDE) shown in Figure 6 provides complete data protection by encrypting your
computer's data so it becomes unreadable to an unauthorized person. If an encrypted drive is removed
from the system and attached to a USB enclosure, it cannot be read from another PC without proper
authorization.
Figure 6 HP Drive Encryption
When the drive is encrypted, the Drive Encryption login window displays before the Windows
®
operating
system starts. Windows requires authentication in the form of a password, smart card or fingerprint before
starting.
HP Client Security allows a Windows administrator to perform the following tasks:
Encrypt or decrypt a partition on an individual hard drive (HDD) or solid state drive (SSD) using software
encryption (internal SATA drive and eSATA drive only).
Encrypt or decrypt OPAL Self Encrypting Drive (SED) using hardware encryption.
Provide enhanced security by disabling Sleep or Standby to ensure that Drive Encryption pre-boot authentication
is always required.
Create encryption recovery key.
Recover access to an encrypted computer using encryption recovery key and HP SpareKey.
Enable Drive Encryption pre-boot authentication using a password, registered fingerprint, or PIN for supported
Smart Cards.