Empty drives must be given drive letters or folder mounts prior to being managed by Entrust through the Windows Disk Manager. If no drive letters or folder mounts are associated with the drives, Entrust cannot encrypt them.
For example, if you have a new system with two disks (E: and F:) and a folder mount (C:\data) that has been registered with Cryptographic Security Platform Vault, the hcl status command would return something similar to the following:
C:\> hcl status Summary ------------------------------------------------------------------------------- KeyControl: 172.16.163.129:443 KeyControl list: 172.16.163.129:443 Status: Connected Last heartbeat: Fri May 26 15:31:05 2017 (successful) AES_NI: enabled Certificate Expiration: Sep 11 22:16:13 2020 GMT Device details ------------------------------------------------------------------------------- Drive Disk Part Cipher Status GUID ------------------------------------------------------------------------------- C: 0 2 none Available N/A E: 1 1 none Available N/A C:\data 2 1 none Available N/A F: 3 1 none Available N/A
We can now add/attach the drives as follows. Please note that this operation is destructive. It will add the drive and format it.
In this example, the E: disk will use the default cipher of AES-XTS-512 and the folder mount C:\data disk will use AES-256. For details on the encryption ciphers, see Encryption Key Sizes and Algorithms.
C:\>hcl add e: Encrypted device E: has been added. dismounting the volume... formatting... The type of the file system is RAW. The new file system is NTFS. QuickFormatting 535.0 MB Creating file system structures. Format complete. 535.0 MB total disk space. 530.6 MB are available. verify succeeded C:\>hcl add -c AES-256 C:\data Encrypted device C:\data has been added. dismounting the volume... formatting... The type of the file system is RAW. The new file system is NTFS. QuickFormatting 500.0 MB Creating file system structures. Format complete. 500.0 MB total disk space. 495.7 MB are available. verify succeeded
You can now view the attached disks as follows:
C:\>hcl status Summary ------------------------------------------------------------------------------- KeyControl: 172.16.163.129:443 KeyControl list: 172.16.163.129:443 Status: Connected Last heartbeat: Fri May 26 15:44:42 2017 (successful) AES_NI: enabled Certificate Expiration: Sep 11 22:16:13 2020 GMT Device details ------------------------------------------------------------------------------- Drive Disk Part Cipher Status GUID ------------------------------------------------------------------------------- C: 0 2 none Available N/A E: 1 1 AES-XTS-512 Attached 9999CF72-8C81-4B86-BB9B-9F3D9928D635 C:\data 2 1 AES-256 Attached 7B894336-5BC8-41A7-81F8-00BBCF74CA64 F: 3 1 none Available N/A
At this point the encrypted folder mount and disk are formatted and ready to use.