Drive encryption protects a disk in the event of theft or accidental loss by encrypting the entire disk including swap files, system files, and hibernation files. If an encrypted disk is lost, stolen, or placed into another computer, the encrypted state of the drive remains unchanged, ensuring only an authorized user can access its contents.
Drive encryption modifies the zero point area of the drive. A computer protected with Symantec™ Drive Encryption presents a modified “preboot” environment (Figure 1) to the user.
Drive encryption software also provides the ability to encrypt removable storage media such as USB drives. When you insert an encrypted USB drive into a computer system, it prompts for passphrase, and upon successful authentication, you can use the USB drive.