The S500 has a feature allowing the encryption of all data at rest, or disks and filesystems. There is a security dongle that must be purchased and installed and then a few commands to run. The steps are simple and can be done on a live system.
The S500 configuration guide available at the Broadcom documentation site has the necessary instructions. Page 17 covers the topic.