3 ms·
I second slicktux's suggestion: look into OPAL, it's much more easier to setup and use compared to LUKS. The best part is, the encryption is transparent to the
by d3Xt3r 1y ago
I second slicktux's suggestion: look into OPAL, it's much more easier to setup and use compared to LUKS. The best part is, the encryption is transparent to the OS, so you could multi-boot between multiple OSes and not worry about encryption or compatibility with partitioning tools etc.
Your drive does need to support OPAL though, check out sedcli for managing SEDs.
- p_ing 1y agoMicrosoft abandoned OPAL/SED support due to vendor's just f-ing it up making the encryption worthless. YMMV.
- d3Xt3r 1y ago?? OPAL is transparent to the OS, Microsoft doesn't need to see/care about it. I'm multi-booting Win11, Linux and GhostBSD on my OPAL2 encrypted drive (on a ThinkPad Z13) and I've got zero issues.
- Arnavion 1y agoThey're talking about Windows Bitlocker. It used to be able to use hardware encryption if the drive supported it, then there were sufficient vulnerabilities in implementations that it now always does software encryption.