Full disk encryption system with boot disk compatibility check

摘要

A system for hard disk full encryption of a boot disk of a computer (20), comprising: a processor (21) configured to: perform one or more pre-boot compatibility checks on the boot disk of the computer (20) to reduce risks in the context of a possible inability of the computer (20) to perform hard disk full encryption, comprising determining whether test booting has been performed; if it is determined that test booting has not been performed, performing the one or more pre-boot compatibility checks using BIOS and UEFI interfaces to identify the software and hardware that is being used by the operating system (35) of the computer (20 attempting to boot an operating system (35) of the computer (20) and indicating a successful booting of the operating system (35) when a successful booting of the operating system (35) has occurred; if it is determined that test booting has been successfully performed, attempting to boot the operating system (35) of the computer (20) or re-performing the one or more pre-boot compatibility checks; if it is determined that test booting has not been successfully performed, restoring a process of normal booting of the operating system (35) and performing normal booting of the operating system (35); Determining one or more encryption policies applicable to a pre-boot execution phase of the computer (20); Comparing the results of the pre-boot compatibility checks with software and hardware criteria required by the particular encryption policies to perform disk full encryption of the boot disk; Determining whether hard disk full encryption is to be applied to the boot disk based on a result of comparing the results of the pre-boot compatibility checks with the criteria required by the encryption policies; and if it is determined that hard disk full encryption is to be applied, applying hard disk full encryption to the boot disk.