While the data at rest encryption feature does not secure data in all aspects of its life cycle, do not underestimate its power. Without proper care of the passphrase, the data owner himself can be locked out of the data!

With the passphrase, which unlocks the internal AES key, the data is transparently accessible. Without the passphrase, the logical data is unreadable, meaningless bit patterns.