The article lacks something like “conclusion” to concisely describe what is the actual goal of all those technical actions. I was lost during the reading and don’t understand why I need all of this. Does it allow to automatically make encrypted bakups? Does it allow to decrypt the hard drive during the boot? (How?)
How is it better than having the offline Vault qube which contains the master key?