Chapter 5. Optional: Enabling disk encryption