Windows Server 2008
--
Questions
--
Followers
Top Experts
I have a Server running MS 2008 R2 which has 3 SAS hard disks configured for RAID 5 on a Perc Controller.
These are obviously showing as 1 virtual disk split into a C: and D: drive. I am thinking of encrypting the data on the D: drive using Bitlocker. Will this work across a RAID array and is there a downside?
Also as a general question if all the disks were stolen from the Server (ie removed from the bays) what data would a person be able to see if they plugged each disk into a server as an external device and would a specialist recovery company be able to access the files?
Thanks
Zero AI Policy
We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.
ย Just to clarify then, there is no reason not to use Bitlocker and as it sees the virtual drive there will be no issues and if I leave the data un-encrypted a recovery person could access the data on any single drive?
It is LSI card with Dell firmware. ย 99% the same, but not 100%. ย This is a question best asked to the dell support community.






EARN REWARDS FOR ASKING, ANSWERING, AND MORE.
Earn free swag for participating on the platform.
Let me add that there are ways to secure a server even when it's not physically secured AND also have the key entered automatically. We could for example use a scheduled task that points to an unlocking batch file on some other server (secured elsewhere). When that encrypted server gets stolen and the thief boots it, the batch will not be accessible and d: would stay locked.
The thing I am still a little unsure of, as I didnt completely understand the very first reply, is that if by any chance someone gained access to the server and removed the individual disks from the server how much data would they see? Obviously the RAID has been broken so it would be what is visible on the actual disk.
Thanks for any clarification.

Get a FREE t-shirt when you ask your first question.
We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.
The best way to read encrypted drives is to not turn them off. If I were to steal a server, and I found that it was encrypted, I'd stop right there unless there was some extreme, very extreme financial gains to be had.
Encrypting server HDD's does not make you compliant with any US or European law or statute I am aware of. There are ones for Mobile, but not server. Encrypting data on servers should be done at file and database levels rather than the OS or Drive level. Again read my article to see what that is.
-rich






EARN REWARDS FOR ASKING, ANSWERING, AND MORE.
Earn free swag for participating on the platform.
Windows Server 2008
--
Questions
--
Followers
Top Experts
Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.