Wave Systems Corp. (fka WAVXQ)

[bbigtim]

awk/Your Reply

Thank you for clarifying these matters. The key points I take from your reply are: (1) the FDE drives are an independent root of trust containing features like the TPM, and (2) the addition of a TPM can harden security by authenticating connection of the PC containing an FDE drive to a trusted network and by limiting authorized user access to the FDE drive.

Sometimes I tend to forget that the FDE drive is itself a security co-processor with features like a specialized TPM. Wavoids who have been here awhile will remember that input devices and output devices can also be made more secure by using their own security co-processor that cannot be accessed by the operating system.