Protect Data at Rest on PCs

Q: Why is it important to protect data on PCs?

PCs are the primary user productivity devices. They continue to ingest, process and store information that may include sensitive and classified data. Many PCs operate in insecure environments where an adversary may gain physical access to the device. Without adequate protection adversaries can extract, modify, encrypt or destroy data. Attacks such as wiping and cloning only take seconds to execute. An adversary with longer access can employ advanced data recovery that includes a variety of techniques to defeat different endpoint protections.

Q: Why do I need hardware encryptions vs relying on software encryption?

Protecting sensitive data from advanced threat actors requires layers of protection. Software encryption provides a basic level of protection but can be defeated using a variety of techniques and technologies. This is why the NSA, DISA, NIAP and other leading experts require full drive hardware encryption to meet standards including CSfC for data at rest and FIPS 140-2. Ideally organizations use a combination of software and hardware encryption with pre boot authentication and multifactor authentication providing layers of protection that can defeat the most sophisticated threat actors.

Q: What types of drives does Cigent Offer?

Cigent offers secure storage on M.2 2280 SSD which is the legacy standard for storage in PCs. The emerging configuration in PCs is M.2 2230 SSD which is the standard on all Microsoft Surface Devices and many of the newest Dell Latitude and Precision PCs and HP Elite Books and HP Workstations.

Q: Does Cigent help with certifications?

Cigent secure storage and Software Full Drive Encryption are listed on the NSA CSfC Components List for data at rest, including the Pre-Boot Authentication requirement. Cigent cryptographic modules are validated under FIPS 140-2 and 140-3, and Cigent capabilities support Executive Order 14028 requirements including encryption of data at rest, multifactor authentication, and zero trust access control.

Q: What is cloning and wiping?

Cloning and wiping are common attacks where an adversary will copy or “clone” a drive and/ or erase or “wipe” a drive. Clone and wipe attacks can take place when a device is at rest or in use. When a device is in use an adversary with physical access can execute an attack in only a few seconds. Cigent prevents cloning and wiping by locking all data ranges. Utilizing hidden partitions data remains protected even when a device is unlocked.

Cigent SSDs deliver FIPS and CSfC-aligned protection for PCs and mobile workstations. Built for federal and defense missions, these drives combine hardware full-drive encryption and pre-boot authentication to keep sensitive data secure.

Book a Demo

Endpoint Assurance for Mission Mobility

Cigent SSDs for PCs provide secure, compliant storage for laptops and workstations used in demanding federal environments. Each drive integrates hardware full-drive encryption and pairs with Cigent Pre-Boot Authentication (PBA) for a complete CSfC for DAR outer protection layer.

Designed for personnel who operate in and out of classified networks, these SSDs maintain security even when devices are powered down or disconnected. Whether in office, transit, or field conditions, Cigent SSD Clients ensure sensitive data remains protected, authenticated, and mission-ready.

See Cigent in Action

CSfC DAR Component List

Cigent provides SSDs and software to meet NSA CSfC for DAR compliance with capabilities that address outer and inner layer requirements.

Enterprise Administration

Cigent Command Line Interface tool seamlessly integrates within existing enterprise management utilities providing administration at scale for Linux and Windows.

Data Sanitization

Data is erased using crypto and block erasure methods. Execution can be initiated locally, remotely, or with automated rule-based policies. Additionally, patented firmware verification ensures all data is destroyed.

Simplify Procurement

Cigent and its SSD partner, Digistor, partner with leading PC OEMs, including Dell, HP, Getac, and Panasonic. Complete CSfC-validated solutions are available directly when sourcing your PC.

Cigent Protection

Understanding CSfC for DAR Protection

Hardware Full Drive Encryption (HW FDE) combined with PBA. This is the outer layer of the dual-layer encryption approach mandated by the Commercial Solutions for Classified (CSfC) Data-at-Rest (DAR) program and provides the first layer of defense. It includes:

AES-256 Hardware Full Drive Encryption
Utilizing NSA-validated cryptography. Encryption keys are not stored in TPM or in aggregate, preventing interception or compromise.
Pre-Boot Authentication (PBA)
Providing a separate and secure environment to unlock drive encryption, PBA prevents an adversary from compromising the OS to access data.

Benefits

Protect Data at Rest

PCs are the critical productivity tools. Emerging Artificial Intelligence capabilities will increase their utility and increase risk as more sensitive data is stored and processed at the edge. Layered protection is necessary to prevent unauthorized access to sensitive data.

Hardware Full Drive Encryption
AES 256-bit hardware encryption is validated by NIAP, with multiple drives listed on the NSA CSfC for DAR component list. Combined with PBA, HW FDE provides the outer layer of CSfC for DAR compliance requirements.
Pre-boot Authentication (PBA)
PBA provides a separate, secure authentication environment before the operating system loads. Validated by NIAP and listed on NSA CSfC for DAR component list. Combined with HW FDE, PBA provides the outer layer of CSfC for DAR compliance.
Software Full Drive Encryption
AES 256-bit full drive encryption validated by NIAP. Undergoing CSfC certification. Includes MFA providing the inner layer of CSfC for DAR compliance requirements.

The Cigent Advantage

Cigent solutions were designed and developed with and for US Intelligence and Defense communities. All employees, including Cigent software development, are based in the US. The team includes multiple personnel with TS/SCI clearance with decades of data protection and operational experience to support your requirements.

Cigent solutions have been tested and validated by leading Federal agencies including MITRE, NIST, NSA, NIAP, the Air Force, Cyber Resilience of Weapon Systems (CROWS), and NSSIF (UK) and are deployed across US Intelligence agencies, US Defense services, and the defense industrial base.

Data Sheet

Learn About PC Security

PCs are critical productivity tools where sensitive data is processed and stored. To ensure the integrity of the data, it is essential that they use full drive hardware encryption with pre-boot authentication (PBA).

Get the Data Sheet

Data Sheet

Secure Your 2230 Devices

The NVMe 2230 form factor is the standard storage configuration across modern platforms such as Microsoft Surface, Dell Latitude, and HP EliteBook devices. Cigent is uniquely positioned to deliver secure NVMe 2230 SSDs with NSA-validated PBA and CSfC-aligned Data-at-Rest protection.

Download the Data Sheet

Data Sheet

Protect Your 2280 Storage

The NVMe 2280 form factor remains the industry standard for storage in PCs and workstations. Cigent Secure 2280 SSDs combines hardware full-drive encryption with NSA-validated PBA and patented security capabilities to ensure mission data stays secure, even in the most demanding environments.

Get the Data Sheet Now

The Latest from Cigent

View All

Hardware vs. Software Encryption for Classified Data at Rest

Blog

October 7, 2026

Frequently Asked Questions

Why is it important to protect data on PCs?

Why do I need hardware encryptions vs relying on software encryption?

What types of drives does Cigent Offer?

Does Cigent help with certifications?

What is cloning and wiping?

Still have Questions?

Learn how to secure mission-critical and classified data across the battlespace.

Download eBook

Cigent’s Federal Data Protection Solutions are second to none

Learn more about how Cigent can help you achieve your mission and protect data at rest and data on the edge from all forms of attack.

Schedule a Demo

Encrypted Storage Solutions

Software Protection

Resource Types

Webinars & Events

Recent Posts

Categories

Protect Data at Rest on PCs

Endpoint Assurance for Mission Mobility

Understanding CSfC for DAR Protection

Protect Data at Rest

The Cigent Advantage

Learn About PC Security

Secure Your 2230 Devices

Protect Your 2280 Storage

The Latest from Cigent

Hardware vs. Software Encryption for Classified Data at Rest

Navy Data-at-Rest Protection for Distributed Maritime Operations

JADC2 Data-at-Rest Protection at the Tactical Edge

Frequently Asked Questions

Why is it important to protect data on PCs?

Why do I need hardware encryptions vs relying on software encryption?

What types of drives does Cigent Offer?

Does Cigent help with certifications?

What is cloning and wiping?

Still have Questions?

Cigent’s Federal Data Protection Solutions are second to none