![]() ![]() In my experience, Bitlocker does in fact have a noticeable degradation in performance even with HDDs. If you don't want to go Windows 8, you lack TPM (though I assume you have it since they asked you to enable bitlocker), or BIOS instead of UEFI there are a number of software products that can manage SED drives in place of Bitlocker. This is where the W8 boot files are stored and the unlocking in Bitlocker happens with it interacting with TPM to pass a key to unlock the drive. When those are activated in this mode (with W8 and Bitlocker), the drive is initially locked and the system will only show a very small "shadow partition" under 200MB. The bulk of Bitlocker in this mode is acting as a "Gatekeeper" since SED drives still need a means of access control to unlock the drive. Using an OPAL compliant drive will allow you to use Bitlocker in Windows 8 in conjunction with the drive's encryption (which it's already doing).īitlocker in this scheme does not actually do any encryption from the system side (at least for data read/written). You have to make sure you buy the SED version, not the plain version. I have not found a Sandforce based drive that supports this, but Micron has one: Micron C400 SED. SSD does offer a big increase in performance.Īre you open to running Windows 8? Do you have a TPM chip in your laptop, and is your laptop UEFI capable? After decryption of the drive I've had no problems and performance has been very good! Needless to say sacrificing a large amount of security. After receiving my RMA, encrypting the drive and using as usual, the exact (change of Hardware Config.) problem reoccurred. Whether it be a fault in the SSD, Bitlocker, or both, the machine stopped accepting passwords and recovery keys all together. The end result is an ongoing request for passwords and/or Bitlocker recovery keys. ![]() The main problem is that the volatile nature of SSD causes Bitlocker to believe that there has been a change in the hardware configuration even when no such change has taken place. ![]() My experience has shown that there's a strong likely hood they're not made for each other. Relatively, across the board, the SSD is faster than the HDD!īitlocker however, has had serious conflicts with the SSD. Only testing larger files (at least 1 GB) there was also a significant increase in speed. Although it was not lightning fast it was apprx. First the test involved simply clocking the OS start up time. I'm using a 1TB HDD (middle to high end) at 7200RPM as my comparison. I've been running Windows 7 Ultimate 64 Bit, using a SSD (120 GB) for about 5 months. In most drives the keys to do this were not user accessible, now with OPAL they can be set by the OS to give you AES encryption for no performance penalty! You need both OS and Hardware support for this to work. Almost all SSDs encrypt the data before writing it because you want your data at the physical level to have high entropy. I would love to see some actual benchmarks with TrueCrypt 7.0 and FDE (older versions of TC will display the problems I talked about above), but I cannot find any!ĮDIT2: Some years later the situation is now different yet again. giving the wear leveling algorithms, which factor into performance, room to work with) has a huge positive benefit, but TRIM does leak data and can theoretically be used to compromise an encrypted partition by someone with enough resources.ĮDIT: This might no longer be true because of "TRIM Passthrough" features that now exist, but there is a lot of very tangled information out there when googling exactly how this behaves. There is some evidence that leaving a free empty partition (i.e. The performance on reads is negligible, but on average you are cutting your write performance by half or more. This defeats both TRIM and any wear-leveling optimizations. The root cause of the problem is that you can no longer tell the difference between free space and usable space because encrypted data and encrypted free space are both treated as data. I do not know if what applies to Truecrypt applies to bitlocker, but on SSDs, Truecrypt has a hugely negative impact on performance if you encrypt the entire disc. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |