Windows 10: Mandatory access control for self encrypting disk partitions LUNs

I want to use a self encrypting disk on windows with at least one encrypting partition. I want to restrict access to the encrypted partition to a single service account. I think that the partitioning should be pretty automatic with the windows disk management tool but I am wondering about how user authentication is handled and how the authentication keys for the disk are stored and controlled by Windows. Specifically, are the disk authentication keys sealed by the TPM and are they also bound to a specific identity by the TPM? Any documentation pointers would be appreciated.

:)

 

Micron_1100_mtfddav256tbn ssd self encryption or not

Correction : In the BIOS there is a field under advanced " Intel AES -IN> ENABLED /DISABLED "

Then I found this which I found helpful Self-Encrypting Drives: A Brief Introduction and Step by Step Guide - TechSpot

 

W7 Hard drive partition issue

to get rid of that 100 meg windows partition that setup creates for you on a new install on a blank hdd:

- press shift+f10 when on the partition management screen in setup <-- this opens a command prompt
- diskpart <-- start the windows command line partition management tool
- list disk <--- list the installed hdds in this computer for the next step
- select disk 0 <- might have to replace 0 with the number of the correct disk
- clean <-- this will erase all data on the disk you selected one step up- dont use the wrong disk!
- create partition primary <- creates a primary partition taking up all space on the drive, adjust the command if necessary
- exit, exit to exit diskpart and the command prompt
- click refresh in partition manager and select your newly created partition and install to that

 

Flaws in self-encrypting SSDs let attackers bypass disk encryption

Read more: Flaws in self-encrypting SSDs let attackers bypass disk encryption | ZDNet