General recommendations for SSD drive encryption in Kaspersky Endpoint Security 11 for Windows (for workstations only)
- Kaspersky Endpoint Security 11.1.1 for Windows (version 220.127.116.11)
- Kaspersky Endpoint Security 11.1.0 for Windows (version 18.104.22.16819)
- Kaspersky Endpoint Security 11.0.1 for Windows (version 22.214.171.124)
- Kaspersky Endpoint Security 11.0.0 for Windows (version 126.96.36.19999)
Supported drive types
Kaspersky FDE encryption is supported on SSD drives, hybrid SSHD drives and drives with Intel Smart Response technology.
Limitations of SSD drive encryption
Kaspersky FDE encryption is not supported on drives with Intel Rapid Start encryption technology. Disable the Intel Rapid Start feature before starting encryption.
Special aspects of SSD drive encryption
- If the SSD drive is new and confidential data is stored on it, select the Encrypt used disk space only checkbox in the Kaspersky Endpoint Security 11 for Windows policy. This will allow the necessary drive sectors to be overwritten.
- If the SSD drive is in use and confidential data is being stored on it, select one of the options:
- Run a Secure Erase of the SSD drive using the means suggested by the manufacturer. Install a new operating system on it and encrypt the SSD drive with the Encrypt used disk space only option.
- Encrypt the SSD drive without the Encrypt used disk space only option.
Free space requirements on the SSD drive when encrypting
See the table below for the volume of free space required on the SSD drive for storing encryption service data.
|SSD drive volume||Volume of free space on the primary SSD drive partition||Volume of free space on the secondary SSD drive partition|
|128 GB||250 MB||64 MB|
|256 GB||250 MB||640 MB|
|512 GB||300 MB||128 MB|
On a Windows operating system, 5-10 GB of free space is required to run encryption on an SSD drive.