In-Place Encryption using TrueCrypt while maintaining original drive letter
Posted on 2010-08-18
I am attempting to fully encrypt all hard drives on a number of servers at my company. My problem is this:
We run a medical database off of a dedicated server which has 3 separate drives (all mirrored independently) The OS resides on the C: drive, SQL database on the D: drive and the front end medical program on the E: drive. All three operate in conjunction with one another.
I need to be able to encrypt all three drives using full disk encryption but need them to auto-mount on system boot (preboot authentication), I need the drives encrypted in-place to ensure there is no interruption in service, and I need the encrypted volumes to maintain their original drive letters since the needed programs have been running upwards of 18 months and I cannot afford a reinstallation to allow the drive references to be changed.
The system partition is easy, no need for instruction there. My issue then becomes encrypting non system partitions in place and allowing the original drive letter to be used. Is there any way to do this with TrueCrypt? My initial thoughts are that I need to dump the files off a set of hard drives, use disk management to change drive letters, encrypt and reinsert files, then add to system favorites verifiying that the original drive letter is being used as well as making sure it is loaded using preboot authentication. That process really gives me chills considering without this database, the company shuts down. Is there a better way of doing this or even a better 3rd party software to utilize?
Any recommendations would be greatly appreciated.