Deployment Guide

Policy Aggre
ssive
Protec
tion
for All
Fixed
Drives
and
Extern
al
Drives
PCI
Regula
tion
Data
Breac
h
Regula
tion
HIPAA
Regula
tion
Basic
Protec
tion
for All
Fixed
Drives
and
Ext
Drives
(Defau
lt)
Basic
Protec
tion
for All
Fixed
Drives
Basic
Protec
tion
for
Syste
m
Drive
Only
Basic
Protec
tion
for
Extern
al
Drives
Encry
ption
Disabl
ed
Description
If this policy is False,
no HCA encryption takes
place, regardless of other
policy values.
HCA policies can only
be used on computers
equipped with a Hardware
Crypto Accelerator.
Volumes
Targeted
for
Encryptio
n
All Fixed Volumes All Fixed Volumes or
System Volume Only
Specify which volume(s)
to target for encryption.
Forensic
Meta Data
Available
on HCA
Encrypted
Drive
False True or False
When True, forensics meta
data is included on the
drive to facilitate forensics.
Meta data included:
● Machine ID (MCID) of
the current machine
● Device ID (DCID/
SCID) of the current
Encryption client
installation
When False, forensics
meta data is not included
on the drive.
Switching from False to
True re-sweeps, based
on the policies to add
forensics.
Allow
User
Approval
of
Secondar
y Drive
Encryptio
n
False True allows users to decide
if additional drives are
encrypted.
Encryptio
n
Algorithm
AES256 AES-256 or AES-128
Port Control Policies
Policies and Template Descriptions 51