x-point: re: FDE encryption key... Exactly correct! I just would like to add that strong authentication to the FDE is done either with a password, biometrics, smartcard or any combination of those.