Status: OUT
RHEL 9 bare-metal deployments with recommended separate partitions (/boot, /, /home, /tmp, /var/tmp) achieve full disk-at-rest encryption through LVM-managed LUKS2 volumes with NBDE automated decryption, providing comprehensive data protection across all storage boundaries.