Solved

encryption on machine

Posted on 2016-08-25
7
89 Views
Last Modified: 2016-08-25
what are benefits for encryption to run on machine? is it only applicable that someone does not read data without the encryption password.. so basically 2 layers of protection? (windows password, and encryption password)

could this affect performance windows programs?
would encryption happen only on writes? (continually)

considering if this is something to consider for a laptop that will be on road..

what could be disadvantages? like potential slowness on less resource machine etc?
0
Comment
Question by:25112
7 Comments
 
LVL 94

Assisted Solution

by:John Hurst
John Hurst earned 125 total points
ID: 41770252
On a modern laptop, encryption does not hinder performance. The value, for a laptop on the road, is that the data is secure if the laptop is lost or stolen. That is the major benefit.
0
 
LVL 30

Assisted Solution

by:Scott C
Scott C earned 125 total points
ID: 41770258
The benefits are that if the machine is lost or stolen or otherwise compromised, the data on the drive cannot be accessed.

This is definitely something you want on a laptop that is on the road.  Especially if sensitive customer data is on the machine.  This will protect the customer as well as yourself from possible legal action.

With the speed of systems now, you won't see much if any performance hit.  

Use BitLocker....comes with Microsoft Windows 10 Pro.
0
 
LVL 5

Author Comment

by:25112
ID: 41770372
BitLocker
is that all it does? encrypt on write?
does read do a decrypt moment by moment too? or is only WRITE involved with the BitLocker tool?

does this have to do anything to do with backups? (scheduled or on-demand) {or put in another way, does this interfere with backups in anyways)
0
MS Dynamics Made Instantly Simpler

Make Your Microsoft Dynamics Investment Count  & Drastically Decrease Training Time by Providing Intuitive Step-By-Step WalkThru Tutorials.

 
LVL 94

Assisted Solution

by:John Hurst
John Hurst earned 125 total points
ID: 41770379
BitLocker encrypts on write and decrypts on read as it go.

Any backup has to be integrated with BitLocker.
0
 
LVL 63

Accepted Solution

by:
btan earned 250 total points
ID: 41770533
Encryption is two layer whereby you protect the at disk level and file/folder level.
- Disk level: in event the HDD is stolen or lose (but cannot boot up w/o the password) - like Bitlocker
- File/Folder (or container) level: in event the of unauthorised login that bypass the disk but file/folder of user files remains encrypted. Like EFS or Veracrypt (container)

There is definitely additional resource to performance encryption but it is minimal impact with computing power and faster disk such as Solid State and event then there is no real experience of slowness using the traditional SATA, IDE or RAID. The more secure (longer key length), the more resource btu so far, on the fly access of the encrypted file are optimal and acceptable.

Con is to ensure recovery and backup is done and verified working. You be surprised one day you forget password and not able to recover or found those expected key to be corrupted. Part and parcel of using crypto and PKI..but it make you feel more assure with data encrypted. Some wanted portable encrypted container and run from any machine - that can be done provider you have admin right but this not quite impactful if you using your own machine most of the time.
0
 
LVL 5

Author Comment

by:25112
ID: 41770791
thankuexperts..
0
 
LVL 94

Expert Comment

by:John Hurst
ID: 41770796
You are very welcome and I was happy to help.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Smart phones, smart watches, Bluetooth-connected devices—the IoT is all around us. In this article, we take a look at the security implications of our highly connected world.
Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question