When a system is first brought up  the NSE disks are openly available to the system without need for authentication The disks themselves automatically encrypt data written to them and decrypt it when read and maintain these disk encryption keys (AKA media encryption keys) within themselves