In order to break with a string of bad news, three manufacturers Fujitsu, Hitachi and Seagate almost simultaneously announced the hard drives with the ability to encrypt data. Among other improvements, these models will support 256-bit encryption, 500 GB capacity and disk cache up to 16 MB. It is expected that they will be available in 2009.
Over the next few years, virtually all hard drives will be released in “ready for encryption” mode. This means that in the near future we are waiting for an update of software that works with encryption at the hardware level.
It is recommended to pay attention to the following points:
The updated software should support the standard Trusted Computing Group (TCG). Fujitsu, Hitachi and Seagate were actively involved in the development of this standard (including a single API) and a large list of possible uses of equipment.
Already, it is important to look for ways to use the Trusted Platform Module (TPM). Each PC is claimed to come with a TPM-security chip with a unique identifier, but few organizations use it. As soon as hard drives with encryption become available, TPM will be used more actively.
Do not wait for Intel vPro. Encryption is one of the new features of vPro. If we consider the need to encrypt data on the entire hard disk, then, most likely, the encryption technology supported by the hard drive will appear earlier, will be "cheaper" and easier to use than encryption based on vPro. Intel and hard drive manufacturers are still ahead, but waiting for vPro should not delay the sale of new hard drives.
Encryption-based equipment will protect data at the system level and help solve another problem: data deletion. When the hard drive is ready to become a pile of scrap metal, you just need to remove the encryption key and - voila, this data will not be read. This opportunity will probably become the main advantage for all of us in the future.