![]() ![]() That Windows tool do not work correctly (at least for NVMe drives). Maybe it is not very big drawback as it will probably won't affect you but it is a nice security feature to have. Second drawback is that Secure Boot won't work as that PBA do not have valid signature (you will have to disable "Secure Boot" to run PBA). You can disable sleep and enable hibernation instead to counter that (hibernation works well as you unlock the drive from PBA when you start the computer). So Windows can't unlock the drive after it gets locked when computer goes to sleep. Maybe it is possible to make sleep work correctly (some enterprise encryption software which support Opal probably can do that) but sedutil is a simple tool which is external from Windows OS. First drawback is that sleep won't work as it is impossible to unlock the drive after the sleep. You will have to enter a password in a specific unlocked pre-boot authorisation environment (PBA) to unlock encrypted part of the drive. ![]() You should at least understand how it works and how to safely (without loosing data) disable it. I do not recommend to do that if you have something important on that drive unless you have a backup in case you screw something up. I had enabled encryption for Samsung 970 EVO drive by following these instructions in the guide.
0 Comments
Leave a Reply. |