Seagate SED, on-disk encryption, for server

Kremlar

Golden Member
Oct 10, 1999
1,426
3
81
I'm exploring the possibility of configuring a server with hardware-based encryption on its internal RAID array. Likely using Seagate drives that support SED plus an Intel RMS25PB080 RAID controller and AXXRPFKDE2 encryption key module. Server would be running Windows Server 2012 R2 Standard, drives likely configured in a RAID 10 array.

I've never used on-disk encryption before. I have 2 quick questions:

1 - With this configuration would the server prompt for a password on boot to bypass the encryption? My understanding is "no".

2 - With this configuration would the server be reasonably protected from someone, say, booting up with different boot media in order to bypass the Windows login password and gain access to the data stored on the RAID array? My understanding is "yes".

Any help appreciated.

Thanks!
 

Elixer

Lifer
May 7, 2002
10,371
762
126
Hmm..SED devices generate the key on the device itself.
So, point 1 is yes, it won't ask for a password, not sure on point 2, since, they would still have access to the device itself, but, it is supposed to use credentials to "unlock" the device.
 
Last edited: