mATX Motherboard/SSD with FDE

[drb01]

I have a Samsung 840 EVO 256GB 2.5" SS, bought Feb 2014, which I believe has FDE (full disk encryption) built in. But I could never get it to work with the Gigabyte GA-H77M motherboard.

I am about to buy a new mobo/cpu. How do I get the FDE to work? I have FDE on my laptop where it works very well, and want the same on my desktop. Is there something I have to look out for on the mobo?

Many thanks for any help

 

[ko888]

Did you install a Trusted Platform Module (TPM) on the motherboard's TPM header?

Most laptops have TPM built in.

How to Enable BitLocker Hardware Encryption with SSDs
https://helgeklein.com/blog/2015/01/how-to-enable-bitlocker-hardware-encryption-with-ssd/

 

[drb01]

Did you install a Trusted Platform Module (TPM) on the motherboard's TPM header?

Most laptops have TPM built in.

How to Enable BitLocker Hardware Encryption with SSDs
https://helgeklein.com/blog/2015/01/how-to-enable-bitlocker-hardware-encryption-with-ssd/

All new desktop motherboards seem to have a TPM header, but I guess I have to separately buy the module to plug into the header. But surely then Windows' BitLocker encryption is done in hardware on the mobo, not software?

It seems very odd to me that desktop BIOSs don't seem to facilitate the FDE built into drives such as the Samsung EVO! Seems only laptop mobos do this..

 

[Paul NZ]

I think the TPM module deals with the encryption. You enable the TPM in the BIOS and turn it on in Windows

Desktops do have an option for TPM, in the BIOS, (If it's got a TPM header).

But you have to install a TPM module to actually use it

I've got a TPM 2 module on this atm

But you can also use Bitlocker without a TPM module if you use Win10 Pro. You have to enable it in Group Policy

But it's probably not as good as a TPM module