[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 127
  • Last Modified:

encryption on machine

what are benefits for encryption to run on machine? is it only applicable that someone does not read data without the encryption password.. so basically 2 layers of protection? (windows password, and encryption password)

could this affect performance windows programs?
would encryption happen only on writes? (continually)

considering if this is something to consider for a laptop that will be on road..

what could be disadvantages? like potential slowness on less resource machine etc?
0
25112
Asked:
25112
4 Solutions
 
John HurstBusiness Consultant (Owner)Commented:
On a modern laptop, encryption does not hinder performance. The value, for a laptop on the road, is that the data is secure if the laptop is lost or stolen. That is the major benefit.
0
 
Scott CSenior Systems EnginerCommented:
The benefits are that if the machine is lost or stolen or otherwise compromised, the data on the drive cannot be accessed.

This is definitely something you want on a laptop that is on the road.  Especially if sensitive customer data is on the machine.  This will protect the customer as well as yourself from possible legal action.

With the speed of systems now, you won't see much if any performance hit.  

Use BitLocker....comes with Microsoft Windows 10 Pro.
0
 
25112Author Commented:
BitLocker
is that all it does? encrypt on write?
does read do a decrypt moment by moment too? or is only WRITE involved with the BitLocker tool?

does this have to do anything to do with backups? (scheduled or on-demand) {or put in another way, does this interfere with backups in anyways)
0
SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

 
John HurstBusiness Consultant (Owner)Commented:
BitLocker encrypts on write and decrypts on read as it go.

Any backup has to be integrated with BitLocker.
0
 
btanExec ConsultantCommented:
Encryption is two layer whereby you protect the at disk level and file/folder level.
- Disk level: in event the HDD is stolen or lose (but cannot boot up w/o the password) - like Bitlocker
- File/Folder (or container) level: in event the of unauthorised login that bypass the disk but file/folder of user files remains encrypted. Like EFS or Veracrypt (container)

There is definitely additional resource to performance encryption but it is minimal impact with computing power and faster disk such as Solid State and event then there is no real experience of slowness using the traditional SATA, IDE or RAID. The more secure (longer key length), the more resource btu so far, on the fly access of the encrypted file are optimal and acceptable.

Con is to ensure recovery and backup is done and verified working. You be surprised one day you forget password and not able to recover or found those expected key to be corrupted. Part and parcel of using crypto and PKI..but it make you feel more assure with data encrypted. Some wanted portable encrypted container and run from any machine - that can be done provider you have admin right but this not quite impactful if you using your own machine most of the time.
0
 
25112Author Commented:
thankuexperts..
0
 
John HurstBusiness Consultant (Owner)Commented:
You are very welcome and I was happy to help.
0

Featured Post

The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now