The best way to remove SSD harddrive at end of day to protect server data

I have a server that has that is using an SSD hard drive. I am looking for the most efficient way for the users to be able to remove the drive at the end of the day and restart in the morning to protect against theft.

Thanks in advance.

dave_skyAsked: 2017-03-24

Who is Participating?

Experts Exchange Solution brought to you by

Enjoy your complimentary solution view.

Get this solution by purchasing an Individual license! Start your 7-day free trial.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 111

JohnBusiness Consultant (Owner)Commented: 2017-03-24

If it is an Opal 2 drive, it is already encrypted so then would be useless to someone who stole it from its moorings.

LVL 39

Dr. KlahnPrincipal Software EngineerCommented: 2017-03-24

I think John is on the right track. Rather than protect the drive, make it useless to anyone who steals it. Encrypt the drive and put the decryption key on a USB pen drive. At the end of the day, turn the machine off and remove the pen drive. The decryption key no longer exists in the machine's memory, the pen drive is easy to take away, the connectors on the SSD are spared unnecessary wear and anyone stealing the SSD gets nothing but a drive full of gibberish.

If you're really concerned, put half the encryption key on one pen drive, half on another, and have two different employees hold half the key.

LVL 70

Gary CaseRetiredCommented: 2017-03-24

Agree with using an encrypted hard drive -- HOWEVER ... one important caveat anytime you do that: be CERTAIN that you have a secure BACKUP of the key. I've seen a LOT of data lost over the years NOT because of theft; but because somebody forgot a password, or lost a key device (e.g. USB Flash drive, or in previous years this was typically a parallel port dongle).

But an encrypted drive is a FAR better idea than just removing the drive and taking it with you => it can be damaged; lost; stolen; etc. ... not to mention the wear & team on the connectors due to daily plugging/unplugging of the drive.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial

LVL 95

nobusCommented: 2017-03-25

and of course - have a good backup of your Data
i would also recommend making regular images of the drive too