Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

As an additional layer of security on a windows server (stored on-site) I am considering to use TrueCrypt.

However my concern is if my webapp will still work as expected? I dont want anyone to access the machine but still have the webapp working as normal over the LAN.

Thanks

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

I think for any large-scale application that has to deal with high load, this would be a bad idea, but if it's small, this is a fine solution to encryption your data and running your web app off the mounted TrueCrypt drive.

share|improve this answer
    
the app itself will be used in a small office with 4 client PCs.its not large scale. Would encrypting the C drive or partition on the server still allow the webapp to be hosted over the LAN/data to be read/written to the database on the server etc? –  Santiago Mar 11 '11 at 11:01
    
Yes, TrueCrypt makes this seamless. –  atx Mar 11 '11 at 11:01
add comment

The the way TrueCrypt and similar full disk encryption applications work hides the encryption layer from the operating system/applications etc. There is a slight performance hit, as every disk access requires an encrypt or decrypt, but for a low load application it will just work.

The slight caveat would be around unattended reboots - I am guessing you only use this server when you are on site, but if you needed to use it remotely, and a power cut had caused it to power down, you would need a physical presence to get it started up again.

share|improve this answer
    
the server will be used when i am offsite. so that may be an issue if im not around and the box shuts down unexpectedly. Could I, encrypt a partition or even folder and give access to a user to start stop the services? –  Santiago Mar 11 '11 at 14:35
    
@Santiago - if you are just encrypting a partition or folder, then yes, you will be able to do that. Not quite as secure as full disk encryption, but more practical in this set of circumstances. –  Rory Alsop Mar 11 '11 at 15:20
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.