So you have a Samsung 960 PRO and want to protect your data using drive encryption. While the drive supports AES encryption and is TCG/Opal compliant, Samsung doesn't tell you how to take advantage of these features. With this post, I'm going to walk through the process of setting up secure boot in the BIOS. In the future, I hope to have some information on how to set things like Bitlocker up in Windows. Maybe some benchmarks too.
The motherboard used is a GIGABYTE GA-Z170X-UD3. I'm guessing that the BIOS will be similar for GIGABYTE's other Z170 motherboards but the interface and/or terminology may be different for other vendors.
So again, I'm using a 512GB Samsung 960 PRO. The BIOS sees it as an NVMe device.
To use secure boot, you will need to boot using UEFI. Any sort of legacy or compatibility boot mode will need to be disabled. Same goes for the compatibility support module or CSM.
From there, I went into the Secure Boot menu and enabled "Attempt Secure Boot".
I was a little confused at this point as to what else I needed to do but, after a reboot, I went into the Secure Boot menu and found that it was now enabled and there were a number of keys listed.
Installing Windows was straightforward and was done (literally) in a matter of minutes thanks to the 960 PRO's ridiculous speeds. Unfortunately, I wasn't able to enable Bitlocker since my computer is lacking a TPM module. I can get around this by creating a USB flash drive, but this will have to wait for a future update.
"Blu-ray is just a bag of hurt." - Steve Jobs