Cigent Software Full Drive Encryption (SW FDE) is a software-based full disk encryption solution designed to serve as the inner encryption layer in NSA Commercial Solutions for Classified (CSfC) Data-at-Rest (DAR) architecture. The product operates independently of the outer hardware encryption layer, activating after the hardware layer has been unlocked. It uses AES-256 encryption with quantum-resistant cryptographic libraries and maintains separate key management distinct from the outer protection layer, in accordance with NSA guidance for layered encryption. Authentication is enforced before the operating system loads (pre-boot authentication), preventing the OS from being leveraged to access encrypted data. Access can optionally require smart card-based multi-factor authentication, combining physical credential possession with PIN verification. Deployment is managed via standard enterprise software-distribution tools using MSI installation flags. Administrators can preconfigure passwords, define authorized users, and enable self-enrollment without a separate management console. The product supports a range of platforms including PCs, mobile workstations, and servers from OEMs such as Dell, Getac, and Panasonic. It also covers non-traditional environments including vehicles, unmanned systems (UxV), and industrial control systems (ICS). Cigent SW FDE has been tested and validated by federal organizations including NSA, NIAP, NIST, DISA, MITRE, and the Air Force, and is deployed across US intelligence agencies, defense services, and the defense industrial base.