Doma, wavx88, re: software encryption
As an aside...
I recently had a software FDE solution installed on a company-issued laptop. It was mandatory for employees with access to proprietary and/or sensitive data.
Encrypting the drive took about 3 hours, during which time the machine was so unresponsive as to be basically useless.
The performance of that laptop before was acceptable, but not stellar; now it is an absolute dog. Switching between applications has become painfully slow, internet browsing has been reduced to a crawl, etc. There have been times when I've waited 30 seconds or more after pressing ctrl+alt+del until the GINA prompt appeared, and there have been many more incidences of unresponsive apps that have to be shut down through Task Manager. The machine just always seems to be bogged down.
I don't have all the configuration details, as I'm on the application development side and not the GIS administrative side, so I can't speak to any questions about that. All I can say is that it is not an optimal solution in my experience.
I don't know how anyone could possibly think that a hardware-based FDE drive wouldn't be better.
FWIW.
Regards
SL