Share via

Is SAN encryption and Bitlocker disk encryption same?

Mohammad Imtiaz Kabir 21 Reputation points
2022-09-29T09:38:13.88+00:00

Dear All

If i do disk encryption with BitLocker in Windows server is SAN encryption needed for data protection.

I want to do it on premises server not in azure.

Sorry i have to tags azure-disk-encryption as don't find any other encryption tags.

Azure Disk Encryption
Azure Disk Encryption
An Azure service for virtual machines (VMs) that helps address organizational security and compliance requirements by encrypting the VM boot and data disks with keys and policies that are controlled in Azure Key Vault.
175 questions
0 comments
Accepted answer
  1. JimmySalian-2011 42,171 Reputation points
    2022-09-29T10:38:07.96+00:00

    Hi Mohammed,

    My understanding is that SAN full disk encryption allows your data to be encrypted while at rest on disks. The encryption keys are either stored on the subsystem controllers or an external central store. However there might be performance impact with data encrypted continously.

    BitLocker is capable of encrypting entire hard drives, including both system and data drives. BitLocker is a volume encryption feature included in Windows Server. It protects at the file volume level so when the database server is online, the volume is unlocked, though not decrypted. If a malicious party would be able to steal your whole drive, they still would not be able to attach and use it.

    In short both are different and more info here - selecting-right-encryption-approach

    More info over here bitlocker-device-encryption-overview-windows-10

    Hope this helps.

    ==
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.