Cloning HDDs with Full Disk Encryption

[eecon]

After reading the following link that explains the opertational theory of Lenovo's 200GB 7200RPM HDD with FDE, I'm wondering if I can use such a HD with FDE in concert with a Hitachi 200GB 7200RPM HDD without FDE (as part of my routine rotational cloning procedure for backup purposes with Acronis TI 10.0)?

http://www-307.ibm.com/pc/support/site. ... 69621.html

I really don't care or need the encryption capabilities .... It's just that a refurbished T61p I'm considering for purchase from the Lenovo Outlet includes the 200GB 7200 RPM HDD with FDE and I currently have a Hitachi 200GB 7200 RPM HDD without the hardware based encryption capabilities.

Is it wise to mix these HDD with Acronis, or any other cloning program for that matter?

[basketb]

Why do you think you couldn't mix the HDs?
As soon as you enter the HD password (which you will do before Acronis kicks in), the FDE-enabled HD behaves just like any other HD.

[eecon]

Why do you think you couldn't mix the HDs?
As soon as you enter the HD password (which you will do before Acronis kicks in), the FDE-enabled HD behaves just like any other HD.

Understood .... Thanks again

[basketb]

Are you using the Ultrabay HD caddy for your cloning purposes? (I always do and forget that people may also use a USB enclosure). If you use a USB enclosure, then the first few posts of this old thread maybe of interest as well.

[eecon]

Are you using the Ultrabay HD caddy for your cloning purposes? (I always do and forget that people may also use a USB enclosure). If you use a USB enclosure, then the first few posts of this old thread maybe of interest as well.

Thanks .... Fortunately, I've been having good sucess using an external enclosure via the reverse clone technique discussed throughout the ThinkPad Form:

1. Clear my source HDD PW;

2. Move source HDD to external 2.5" SATA USB enclosure;

3. Insert target HDD in my T61 and clear it's HDD PW. I'm not sure if clearing the target's HDD PW here is necessary, but I do it anyway ... I probably should stop doing that as I could mistakenly reassign it a different PW that I can't break the next time;

4. Boot from Acronis disk and perform clone (including Lenovo service partition);

5. Briefly test new clone and restore it's HDD PW. If I stop clearing the backup clone's HDD PW as I discussed in Step 3, then the last part here at Step 5 would be moot;

6. Remove and replace the original HDD target and restore it's HDD PW.

The reason I don't use the new clone until my next monthly backup is that there always the small chance that there are some hidden errors on it that could multiply over time between both drives (and the backup clone is only 100GB whereas my main drive is 200GB, but with only with 26GB of data on it).

However, I'm tempted to order a Ultabay HD Caddy to simplify the routine .... My understanding is that the backup clone target can remain in the ultra-bay (reverse cloning may not be absolutely necessary).

Thanks again

[basketb]

...
However, I'm tempted to order a Ultabay HD Caddy to simplify the routine .... My understanding is that the backup clone target can remain in the ultra-bay (reverse cloning may not be absolutely necessary).

Thanks again

Correct, with the ultrabay caddy, I put the new HD in it, and clone the old drive to the new one. At the end of the cloning process, the Thinkpads shuts down. I put the new HD inside the Thinkpad and it just works (this has so far worked with an A31, A31p, T60p and T61p).

[eecon]

Thanks ..... A quick summary about HDDs with FDE to make sure I understand the true effectiveness of FDE:

An FDE drive placed in an external enclosure requires that the HDD PW be cleared to work .... That part I understand and I assume any data on that drive is fully accessible to anyone that gets their hands on the external enclosure with the FDE drive still in it (i.e. it's just like an ordinary HDD if there is no additional third-party encryption software used).

Thus an FDE drive is only really protected when it has a HDD PW and the second line of defense (beyond the HDD password) becomes the hardware encrytion of the data on it's platters if someone actually goes to the trouble of disassembly for advance forensic recovery.

As for speed, the hardware encryption rarely impacts HDD performance, unlike software based third-party encryption.

Does all that sound about right?

Thanks

[Excomputech]

Hi All,

Full disk Encryption is fully possible with a new hardware cloning tool. No PC required.
It has been tested with PGP, Gardian Edge, Sophoes, and Pointsec/ check point.
80gb-250gb 2.5 sata drives under 30-60min cloning time.
You can also clone micro sata HD and SSD with it with an adapter.
Other adapters coming soon for 50mm mSATA and pci-e SSD 50mm and 70mm drives.
Solid state drives are 3-10 times faster copying time.
Copy speed is determined by the slowest drive speed of the 2 drives.
Clone same size to same size or larger. Rest of free space will be unpartioned.
Even cloning hard drive that is starting to fail will work.

You can contact me or go to excomputech dot com.
http://www.excomputech.com