Users Guide

Glossary

Credential - A credential is something that proves a person’s identity, such as their Windows password.

Preboot Authentication (PBA) - Preboot Authentication serves as an extension of the BIOS or boot firmware and guarantees a

secure, tamper-proof environment external to the operating system as a trusted authentication layer. The PBA prevents

anything being read from the hard disk, such as the operating system, until the user has confirmed they have the correct

credentials.

Protected – For a self-encrypting drive (SED), a computer is protected once the SED has been activated and the Pre-boot-

authentication (PBA) is deployed.

Self-encrypting Drives (SEDs) - A hard drive that has a built-in encryption mechanism that encrypts all data stored on the media

and decrypts all data leaving the media, automatically. This type of encryption is completely transparent to the user.

Single Sign-On (SSO) - SSO simplifies the logon process when multi-factor authentication is enabled at both preboot and

Windows logon. If enabled, authentication is required at preboot only, and users are automatically logged on to Windows. If not

enabled, authentication may be required multiple times.

Trusted Platform Module (TPM) - TPM is a security chip with three major functions: secure storage, measurement, and

attestation. The Encryption client uses TPM for its secure storage function. The TPM can also provide encrypted containers for

the software vault.

Glossary 11