Full disk encryption solutions protect the confidentiality of data at rest. Such solutions come in two parts – an authorisation gathering component and an “Encryption Engine” which performs the bulk encryption and decryption of information. This combination protects data against loss or theft of the storage media by ensuring that all user data is properly encrypted and is only accessible if a number of credentials are presented.
Details the features, testing and deployment requirements commercial products must display to achieve certification. This Security Characteristic (SC) is intended for vendors, system architects, developers, evaluation and technical staff operating within the security arena.