Review of My New Bulk Disk Encryption Hard Drives

Performance, hardware, software, general buying and gaming discussion..
Post Reply
Message
Author
eecon
Senior Member
Senior Member
Posts: 706
Joined: Sat Jul 14, 2007 6:58 pm
Location: West Coast, USA

Review of My New Bulk Disk Encryption Hard Drives

#1 Post by eecon » Mon Mar 16, 2009 10:49 pm

Here's the latest update after using my two new Hitachi 7K320 HTS723232L9SA61 #0A57527 320GB w/16mb buffer BDE drives in my T61p. These are Bulk Disk Encryption drives ..... i.e. they use AES hardware-based encryption ..... Seagate calls the same thing FDE or Full Disk Encryption)

They work just like non-BDE drives regarding all aspects of setting, clearing or changing HDD passwords in BIOS and with no impact on performance (at least based on my 3DMark06 scores and my stopwatch measured times to transfer large groups of files back and forth between the drives).

Furthermore, clearing and/or changing the BDE HDD Passwords in BIOS (at least on my Hitachi units) thankfully does not delete the data. However, after booting with the new BDE drives for the first time, a new additional option in my T61p BIOS automatically became available under "Security/Passwords" that offers to clear each HDD's BDE PW Encryption Key and securely delete all data .... apparently for those who wish to completely and securely reset the drives before disposal or resale.

Also, no more hassels with software based encryption ..... no more mounting/unmounting volumes, typing in extra SW encryption program PWs, slow backups or slow cloning. No more risks associated with accidentally deleting your SW encrypted file volume(s) or having Windows initialize your whole SW encrypted drive by mistake. All the AES encryption is seamlessly invisible, automatic and idiot proof (which is good for me).

Acronis TI v11.0 clones these BDE drives without requiring a clearing of the HDD PW's when using the Ultrabay adapter and only reads the actual data just like non-BDE drives so clones are faster when the drive is not full. Regarding the making of backup image files (not clones), it's also nice that Acronis only images the actual data and does not require a slow bit-by-bit image of the entire SW encrypted file volume(s) or the whole SW encrypted drive(s)/partition(s) even when they are not full (I'm talking here about making Acronis backup .tib image files to another archive HDD).

I think I will pick-up another pair of these 320GB 7200RPM BDE units for use as my weekly backup clones (I use two HDDs together in the T61p with an Ultrabay Adapter). I can store these extra BDE clones in my spare T61 so it is always sync'd up with the T61p, especially since it's just a simple HDD swap between these two nearly identical T-6X units and WinXP boots up just fine after a HDD swap.

IMHO, these 320GB 7200RPM BDE drives are well worth the 115 bucks I spent for each (compared to 80 bucks each for their non-BDE versions), especially if your clients require encryption when traveling. Only now you can travel without the added hassels and effort of dealing with SW based encrytion and the very real risks associated with accidentally deleting your encrypted file/container volume(s) or letting Windows initialize a whole SW encrypted drive by mistake.

One thing to note however is that the Hitachi BDE units are only 1.5 SATA mode compared to their same non-BDE units that have a jumper to select 1.5 or 3.0 SATA mode. This should make no difference for ThinkPad owners because Lenovo has hardware crippled or somehow limited the T6X series (and I also believe the T400/T500/W500/W700 series) to 1.5 SATA mode from what I've read elsewhere here on the ThinkPad Forum.

Bottom line, I think Hitachi BDE and Seagate FDE units will become more readily stocked and available in the future by the bigger online sellers of HW components as time moves forward, especially as more and more companies move to hardware-based encryption of their mobile units.

I rate BDE and FDE technology a big Two :thumbs-UP: :thumbs-UP: for ease of use if you need AES encryption without any apparent performance hit and/or you wish to minimize the potential of accidental deletion of your encrypted data.
Two - T61p 15.4" WS T9300 2.5Ghz units, August 2008 08/08 Builds + Nvidia FX570M GPUs, One - T42 15" Flexview 1.8GHz + ATI GPU for travel, Two - T500 15.4" T9600 & T9400 CPUs with ATI HD3650 GPUs, One - Stupidly Fast W520 15.6" i7-2860QM + Nvidia 2000M GPU + Series 3 Dock w/USB 3.0

phrider
Posts: 31
Joined: Mon Sep 11, 2006 12:30 pm
Location: Los Angeles, Calif.

Re: Review of My New Bulk Disk Encryption Hard Drives

#2 Post by phrider » Mon Mar 16, 2009 11:39 pm

Nice write-up.

Have you tried comparing the speed performance of one of the regular Hitachi drives with one of the BDE ones?
phrider

eecon
Senior Member
Senior Member
Posts: 706
Joined: Sat Jul 14, 2007 6:58 pm
Location: West Coast, USA

Re: Review of My New Bulk Disk Encryption Hard Drives

#3 Post by eecon » Mon Mar 16, 2009 11:43 pm

phrider wrote:Nice write-up.

Have you tried comparing the speed performance of one of the regular Hitachi drives with one of the BDE ones?
Yes ..... with both jumper settings set at 1.5 and 3.0 SAT mode, there is no disernable difference.

Technical write-ups about AES hardware-based encryption also state that there should be no performance hit as compared to non-BDE drives (unlike SW based encrypted drives). My rudimentary performance tests seem to confirm this also :thumbs-UP:
Two - T61p 15.4" WS T9300 2.5Ghz units, August 2008 08/08 Builds + Nvidia FX570M GPUs, One - T42 15" Flexview 1.8GHz + ATI GPU for travel, Two - T500 15.4" T9600 & T9400 CPUs with ATI HD3650 GPUs, One - Stupidly Fast W520 15.6" i7-2860QM + Nvidia 2000M GPU + Series 3 Dock w/USB 3.0

archer6
Moderator Emeritus
Moderator Emeritus
Posts: 2674
Joined: Thu Mar 09, 2006 10:51 pm
Location: California, USA

Re: Review of My New Bulk Disk Encryption Hard Drives

#4 Post by archer6 » Tue Mar 17, 2009 12:40 am

eecon wrote:Here's the latest update after using my two new Hitachi 7K320 HTS723232L9SA61 #0A57527 320GB w/16mb buffer BDE drives in my T61p.
Excellent Review! You covered all the areas I was interested in. My questions: Where did you purchase these drives? How are they as far as noise & heat are concerned?

Thanks!
Favorites From My ThinkPad Collection

Workstations... T40p ~ T41p ~ T42p ~ T43p ~ T60p ~ T61p ~ W500 ~ W510
T Series..... T22 ~ 30 ~ 40 ~ 41 ~ 42 ~ 43 ~ 60 ~ 400 ~ 500 ~ 510
X Series..... X20 ~ 30 ~ 40 ~ 60 ~ 60s ~ 200 ~ 200s ~ 301
Netbooks... S-10 ~ S-12

RealBlackStuff
Admin
Admin
Posts: 17517
Joined: Mon Sep 18, 2006 5:17 am
Location: Mt. Cobb, PA USA
Contact:

Re: Review of My New Bulk Disk Encryption Hard Drives

#5 Post by RealBlackStuff » Tue Mar 17, 2009 7:13 am

If Acronis can image the HD without requiring the password, can you then use e.g. the Acronis Explorer to access the image data without a password?
If so, those BDE disks would be a joke!
Lovely day for a Guinness! (The Real Black Stuff)

Check out The Boardroom for Parts, Mods and Other Services.

eecon
Senior Member
Senior Member
Posts: 706
Joined: Sat Jul 14, 2007 6:58 pm
Location: West Coast, USA

Re: Review of My New Bulk Disk Encryption Hard Drives

#6 Post by eecon » Tue Mar 17, 2009 8:52 am

RealBlackStuff wrote:If Acronis can image the HD without requiring the password, can you then use e.g. the Acronis Explorer to access the image data without a password?
If so, those BDE disks would be a joke!
Acronis can only image these drives if they are in a ThinkPad and their BIOS HDD PW has been entered. Now if you clear a BDE's regular BIOS HDD PW and simply not use a PW, then you basically have non-encrypted data on the platters just like a non-BDE drive. In that case, you can put the drive in an external exclosure just like any non-PW protected HD and make images or clone, etc.

Once you set the HDD PW on the BDE via the ThinkPad BIOS, all the existing data becomes encrypted on the platters and you can only image the drive when it's in a ThinkPad unit's main bay or the UltraAdapter. Once you clear that HDD PW via ThinkPad BIOS, all the platter data becomes non-encrypted. The HDD PW operates like a curtain switch (visible/not visible). At least that's what I'm experiencing.

Bottom line ..... BDE and FDE instructions say that the hardware encryption works hand-in-hand with the HDD PW. No BIOS HDD PW ..... no encryption. Add a BIOS HDD PW ..... everything existing on the disk becomes encrypted. Clear the BIOS HDD PW .... everything existing on the disk becomes non-encrypted.

BTW, my Acronis settings are also set to require a separate PW to open any Acronis backup image file that I occassionally create (these backup image files are different from my usual weekly complete HDD backup clones). My Acronis backup image files are stored on an external 3.5" HDD (which is also AES software encrypted). Thus two PWs are needed to view Acronis image files generated from any source on my external 3.5" HDD, i.e. the software-based encryption folder PW and the Acronis Image file PW.

Hope this following info helps clarify things :thumbs-UP:

http://www-307.ibm.com/pc/support/site. ... MIGR-69621

http://www.hitachigst.com/tech/techlib. ... _final.pdf
Last edited by eecon on Mon Mar 30, 2009 2:56 am, edited 4 times in total.
Two - T61p 15.4" WS T9300 2.5Ghz units, August 2008 08/08 Builds + Nvidia FX570M GPUs, One - T42 15" Flexview 1.8GHz + ATI GPU for travel, Two - T500 15.4" T9600 & T9400 CPUs with ATI HD3650 GPUs, One - Stupidly Fast W520 15.6" i7-2860QM + Nvidia 2000M GPU + Series 3 Dock w/USB 3.0

eecon
Senior Member
Senior Member
Posts: 706
Joined: Sat Jul 14, 2007 6:58 pm
Location: West Coast, USA

Re: Review of My New Bulk Disk Encryption Hard Drives

#7 Post by eecon » Tue Mar 17, 2009 8:56 am

archer6 wrote:Excellent Review! You covered all the areas I was interested in. My questions: Where did you purchase these drives? How are they as far as noise & heat are concerned?

Thanks!
Less noise than the original 160GB Momentus 7200.2 non-FDE that came with the T61p ..... comparable heat (i.e. cool).

http://www.buy.com/retail/product.asp?sku=208292233

Enjoy :thumbs-UP:
Last edited by eecon on Mon Mar 30, 2009 2:46 am, edited 1 time in total.
Two - T61p 15.4" WS T9300 2.5Ghz units, August 2008 08/08 Builds + Nvidia FX570M GPUs, One - T42 15" Flexview 1.8GHz + ATI GPU for travel, Two - T500 15.4" T9600 & T9400 CPUs with ATI HD3650 GPUs, One - Stupidly Fast W520 15.6" i7-2860QM + Nvidia 2000M GPU + Series 3 Dock w/USB 3.0

phrider
Posts: 31
Joined: Mon Sep 11, 2006 12:30 pm
Location: Los Angeles, Calif.

Re: Review of My New Bulk Disk Encryption Hard Drives

#8 Post by phrider » Thu Mar 19, 2009 4:44 pm

I got mine from http://www.nowdirect.com but it appears that they're out of this model at the moment but expecting restock in a week:
http://nowdirect.com/exec/partInfo/part ... =295&Nty=1
$103 at the moment.

To make sure that you're getting the right drive, always check the part number. AFAIK, the part number on the BDE version of the Hitachi 7k320 Travelstar is 0A57527 for model HTS723232L9SA61.
phrider

eecon
Senior Member
Senior Member
Posts: 706
Joined: Sat Jul 14, 2007 6:58 pm
Location: West Coast, USA

Re: Review of My New Bulk Disk Encryption Hard Drives

#9 Post by eecon » Thu Mar 19, 2009 5:05 pm

phrider wrote:I got mine from http://www.nowdirect.com but it appears that they're out of this model at the moment but expecting restock in a week:
http://nowdirect.com/exec/partInfo/part ... =295&Nty=1
$103 at the moment.

To make sure that you're getting the right drive, always check the part number. AFAIK, the part number on the BDE version of the Hitachi 7k320 Travelstar is 0A57527 for model HTS723232L9SA61.
Thanks for the info on pricing .... It looks like they have a discrepancy on their spec listing. They list the detailed specs for the non-BDE unit (3.0 SATA) so buyer beware (the BDE unit is only 1.5 SATA). Here is a link to all the correct part numbers and specs for Hitachi (you are correct about always double checking a site for both the long and short ID numbers on Hitachi units):

http://www.hitachigst.com/tech/techlib. ... rd1Q09.pdf

Let us know which flavor arrives when you get it .... Thanks :thumbs-UP:
Two - T61p 15.4" WS T9300 2.5Ghz units, August 2008 08/08 Builds + Nvidia FX570M GPUs, One - T42 15" Flexview 1.8GHz + ATI GPU for travel, Two - T500 15.4" T9600 & T9400 CPUs with ATI HD3650 GPUs, One - Stupidly Fast W520 15.6" i7-2860QM + Nvidia 2000M GPU + Series 3 Dock w/USB 3.0

eecon
Senior Member
Senior Member
Posts: 706
Joined: Sat Jul 14, 2007 6:58 pm
Location: West Coast, USA

Re: Review of My New Bulk Disk Encryption Hard Drives

#10 Post by eecon » Mon Mar 30, 2009 2:58 am

phrider wrote:I got mine from http://www.nowdirect.com but it appears that they're out of this model at the moment but expecting restock in a week:
http://nowdirect.com/exec/partInfo/part ... =295&Nty=1
$103 at the moment.

To make sure that you're getting the right drive, always check the part number. AFAIK, the part number on the BDE version of the Hitachi 7k320 Travelstar is 0A57527 for model HTS723232L9SA61.
Any ETA yet on your Hitachi 320GB BDE?
Two - T61p 15.4" WS T9300 2.5Ghz units, August 2008 08/08 Builds + Nvidia FX570M GPUs, One - T42 15" Flexview 1.8GHz + ATI GPU for travel, Two - T500 15.4" T9600 & T9400 CPUs with ATI HD3650 GPUs, One - Stupidly Fast W520 15.6" i7-2860QM + Nvidia 2000M GPU + Series 3 Dock w/USB 3.0

phrider
Posts: 31
Joined: Mon Sep 11, 2006 12:30 pm
Location: Los Angeles, Calif.

Re: Review of My New Bulk Disk Encryption Hard Drives

#11 Post by phrider » Mon Mar 30, 2009 8:45 am

eecon wrote:Any ETA yet on your Hitachi 320GB BDE?
I got mine 7 weeks ago. It's been up and running since then, with no difference in speed (since the Z61p SATA channel is 1.5Gb anyway).

If you're interested in NowDirect's stock expectations, I suggest that you call them -- their phone support was very responsive.
phrider

Post Reply
  • Similar Topics
    Replies
    Views
    Last post

Return to “Thinkpad - General HARDWARE/SOFTWARE questions”

Who is online

Users browsing this forum: No registered users and 6 guests