Full Disk Encryption
BSI-CI-RP-0008-2018 | Version 2.0.2 | Date 15.12.2021
for the protection of data classified " VS-NUR FÜR DEN DIENSTGEBRAUCH"
Full Disk Encryption (FDE) is a product used to encrypt a disk to prevent access to sensitive data stored on the disk when the device is not in use. User authorization is required to gain access to the sensitive data. Full Disk Encryption thus protects sensitive data particularly in the event of loss or theft, but not directly during ongoing operation, since the data is accessible in plain text at the application level during ongoing operation.
Furthermore, the term Full Disk Encryption includes all further functionalities that belong to the product type Full Disk Encryption in the sense of this CI-RP, i.e. not only the mechanism for encrypting the data before storing it on a data carrier, but also further direct or supporting security services.
In this CI-RP, Full Disk Encryption refers to the encryption of a data carrier. The encryption of individual files or folders, on the other hand, is not the subject of this CI-RP.
