We are being asked about encrypting our backups.

Looking at client side encryption, if they want to encrypt all contents of a 
drive under windows, is

Include.encrypt c:\...\*

The best way?

Also, what about a bare metal restore of an encrypted client?
Using encryptkey=generate

Will doing a systemstate restore first bring back the key so as to restore 
files?

Thank you all. This will get me started.