Q: For servers running Windows 2008 and up, what would be the most reliable whole disk encryption? We want to protect our data from unauthorized access.
Right now, we used BitLocker. However, the key is still resident in the system and/or MS can decrypt it because they have what it's called: Key Escrow. I've used TruCrypt, but the likelihood of it getting cracked is getting relatively easy. Containers get resided in RAM and can be pulled off. I'm not trying to sound paranoid or worrying about extortion or any other crimes. The key point here is, "protecting data" using Best Practice guidelines.