The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
0answers
12 views

How to shrink encrypted lvm? [duplicate]

I have a LV. on top of LV there is a luks volume and on top of luks there is an ext4. I already shrunk the ext4 and now i don't know how to correctly shrink luks and LV not to loose any data. how to ...
1
vote
0answers
60 views

Enabling Disk Encryption on DC S 3700?

I have a server running Debian stable with two 100GB Intel DC S 3700 drives in a Linux MD RAID 1. According to Intel, these drives support 256-bit AES encryption and I would like to encrypt the data ...
0
votes
0answers
19 views

Trust relationship between workstation with PBA/Encryption and domain failed

I have installed some endpoint encryption solution on a laptop and from that point I could not login into the workstation with another user. Windows always tells me that the trust relationship between ...
2
votes
1answer
96 views

Changing Disk Encryption key in CentOS 6.4

I checked the "encryption" checkbox in the Anaconda installer during CentOS 6 installation, which encrypts at the PV (Physical Volume) partition level. Now, for some security reasons, I want to ...
1
vote
1answer
82 views

Expanding raid 5 luks partition

I have just bought 2 new drives to my raid 5 array. I have successfully added them to the array and resynced. I now have a /dev/md4 drive that is 16 TB, but the crypt-luks partition md4p1 is still 12 ...
0
votes
2answers
51 views

Mac Encryption and Reporting

We have a requirement at my company to support Macs. The machines need to be encrypted and have some sort of way to check in with a management system to verify the encryption status. This can be ...
1
vote
0answers
54 views

Can't mount ecrytpfs as a non-root user on Red Hat

I'm trying to mount a ecryptfs volume on Red Hat as a regular user. ecryptfs-utils is installed from source (repos only contain old versions). Mounting as root works normally, but trying with a ...
0
votes
2answers
55 views

Secure a live server

I've been asked to encrypt the filesystem of a live server without affecting the operations or data. I normally install Redhat with encrypted filesystem, so the "how" is not the problem. I want to ...
5
votes
1answer
541 views

BitLocker with Windows DPAPI Encryption Key Management

We have a need to enforce resting encryption on an iSCSI LUN that is accessible from within a Hyper-V virtual machine. We have implementing a working solution using BitLocker, using Windows Server ...
3
votes
1answer
116 views

Resting Encryption on iSCSI SAN in Hyper-V Environment

I have a need to implement resting encryption of data within our environment. Basically, we have a Hyper-V virtual server named FILER01 that runs Windows Server 2012 that is has a direct iSCSI ...
-4
votes
1answer
83 views

How to protect against in-RAM attacks

Since hosting providers are constantly under attack from hackers, encryption of the entire file system (the entire server) with tools like www.truecrypt.org seems like an absolute must to me, if you ...
5
votes
1answer
115 views

Determine if LUKS/dmcrypt key is present

I am writing a Chef LWRP to add a key to a LUKS container and I'm having difficulty coming up with a way to determine whether or not my key already exists. cryptsetup luksAddKey will happily add the ...
1
vote
1answer
191 views

Troubleshooting I/O latency possibly caused by file system driver

I have a SQL Server instance (SQL Server 2008 R2, Windows 2008 R2) that complains, for very short, random periods of about 15-20 seconds, that some of its I/O requests are taking longer than 15 ...
1
vote
1answer
42 views

Will adding a Windows machine to a different domain adversely affect DPAPI encryption?

I am considering moving a machine on which DPAPI encryption is used from one domain to another. Will doing this break or otherwise adversely affect the DPAPI configuration - and already encrypted ...
0
votes
1answer
157 views

Move an LXC container to a dm-crypt/LUKS filesystem

I need to move a container to a different filesystem, specifically a subdir of an already mounted LUKS/dm-crypt home dir. I tried moving it there and then bind mounting or symlinking it to ...
1
vote
1answer
439 views

CentOS 6.3 drive encryption being on remove server

During the clean installation of CentOS 6.3, I choose to encrypt the primary partition / (the whole drive) (obviously except /boot). My point is to have fully encrypted drive (8 drives in RAID10) but ...
2
votes
1answer
187 views

Possible to set encryption block size in LUKS?

When I do a benchmark test modprobe tcrypt sec=2 mode=200 I see that different encryption block sizes are used test 0 (128 bit key, 16 byte blocks): 4460604 operations in 2 seconds (71369664 ...
1
vote
1answer
207 views

Does cryptsetup “Plain mode” store the hashed passphrase in each sector?

When I read the manpage for cryptsetup on Linux about "Plain mode" it says: Plain dm-crypt encrypts the device sector-by-sector with a single, non-salted hash of the passphrase. and the -c ...
0
votes
1answer
327 views

How to re-encrypt disk with a different password (standard debian full disk encryption)?

I've got a situation where disk encryption password has been compromised and now am in a situation where I need to re-encrypt the hdd with a different password. It's a standard debian full disk ...
0
votes
2answers
1k views

Is there such thing as hardware encrypted raid disk?

I have a server for which I want to protect the content. The server is located on a clients premises. Is there a way to encrypt the content of a RAID DISK (at hardware level) ? What I need is that ...
0
votes
2answers
176 views

USB key to pass password in Centos 6 [closed]

I had a room mate that put a livecd in my desktop and looked around on my machine. I caught him in the act and threw him out. I haven't had a room mate for a while now and so as to avoid the livecd ...
1
vote
1answer
387 views

Disable asking for a passphrase without having to re-make the encrypted partition

I have a server which I set up with its root partition totally encrypted. I urgently need to disable the passphrase dialog at startup because it is not letting the server boot up after an electricity ...
2
votes
2answers
319 views

Decrease in disk performance after partitioning and encryption, is this much of a drop normal?

I have a server that I only have remote access to. Earlier in the week I repartitioned the 2 disk raid as follows: Filesystem Size Used Avail Use% Mounted on /dev/mapper/sda1_crypt ...
0
votes
2answers
185 views

Best Practice: Implementing a Full Disk Encryption on laptops

We are thinking about using TruEncrypt full disk encryption to protect the data on our laptops (roughly 15-20 in the healthcare field - XP & Win7). And I was wonder about backups, and not per say ...
2
votes
2answers
877 views

Security of BitLocker with no PIN from WinPE?

Say you have a computer with the system drive encrypted by BitLocker and you're not using a PIN so the computer will boot up unattended. What happens if an attacker boots the system up into the ...
0
votes
1answer
162 views

Access via sftp/scp an encrypted disk

I would like to do something really paranoid but I am not sure it could be done at least easily... Let's see if I can explain properly: I have a server running debian (could be changed to any other ...
5
votes
1answer
171 views

Does LUKS also encrypt free space?

I have moved to Ubuntu 12 and chosen to use full disk encryption (encrypted LVM). So now I'm wondering: should I shred (eg: with secure-delete package, srm) the free disk space to remove any remnant ...
2
votes
2answers
238 views

Does dm-crypt support journaling filesystem transactional guarantees?

I'm considering using ext4 on encrypted LVM (which uses LUKS and dm-crypt). Will the transactional guarantees in ext4's journaling be preserved? Bonus: where may I find authoritative information ...
3
votes
1answer
534 views

Are there any Microsoft Exchange Clients for iOS and Android that store their local data in an encrypted manner?

I don't feel like this is a product recommendation question, more of a "does this tech even exist and is it feasible" question, but if I'm wrong, feel free to give this question the boot. Context: ...
7
votes
2answers
812 views

Approaches for Linux server disk encryption

What are the approaches available for fully encrypting a disk on a remote server (say, colocated in a datacenter)? On Windows, we can just turn on Bitlocker with a TPM. Then the server can reboot, and ...
1
vote
1answer
154 views

some Zimbra project planning questions

I am planning to deploy a ZCS machine in a remote DC on colocation. Using the latest Community edition Hardware: 2x SAS disks for OS in raid1, 8x SAS disks in raid10 for Zimbra, 32Gb RAM 8 CPU ...
1
vote
2answers
686 views

Variable size encrypted container [closed]

Is there an application similar to TrueCrypt, but the one that can make variable size containers opposed to fixed-size or only-growing-to-certain-amount containers which can be made by TrueCrypt? I ...
7
votes
1answer
372 views

State of hardware-assisted disk encryption in Linux

I use dm-crypt to encrypt partitions. I am building a small office server from consumer (or pro-sumer) category hardware. It made me wonder, hardware-assisted encryption is a notion in the air for ...
1
vote
1answer
662 views

Can I encrypt a single folder in Windows Server 2008 R2 with BitLocker?

Using Windows Server 2008 R2, is there a way to encrypt a folder, not the whole disk using Bitlocker?
2
votes
1answer
312 views

Apache serving files from an encrypted drive returns a 403 forbidden error

I create a sparsebundle and mount it as a virtual drive for each development project I work on. This works great until I needed to add encryption to one of the projects for added security of my ...
2
votes
2answers
409 views

OS reinstall on a machine with Whole Disk Encryption

I have a machine that has McAfee SafeBoot Whole Disk Encryption on it. If I don't have the safeboot password, can I boot from a OS installation disk, format the disk and reinstall the OS? Will that ...
1
vote
1answer
1k views

ESXi encypted VMFS?

Does anyone know a (free?) way to have a fully encrypted local-disk (no NFS,iSCSI,FC) VMFS inside the hypervisor itself? I am using ESXi 4.1 U2.
0
votes
1answer
302 views

How to encrypt document root of Apache and all MySQL databases?

I need it encrypted and be decrypted just only when apache started, so this is the plan: Boot computer. Decrypt /var/www and mysql databases files. Start apache. So maybe its the path not to use ...
2
votes
2answers
1k views

Clarifications on encrypted LVM in Ubuntu, RAID1, and headless server

I’ve pondered about encrypting my hard disk on my laptop and server for quite some time, but never got around to it since I don’t think I understand how encryption affects my day to day usage and the ...
2
votes
2answers
2k views

CentOS / Redhat 6 Mount Encrypted Partition After Boot

I have an encrypted partition that I setup during install for CentOS 6 that I want to mount manually after boot. By default it prompts me for a password at boot time. I was able to get it to not ...
2
votes
2answers
197 views

Looking for centrally managed full-disk encryption product for Windows 7

Let me start this off by saying I've already evaluated and have planned to purchase SecureDoc Enterprise from WinMagic. However, due to billing issues (not price) I'm afraid I may not be able to make ...
3
votes
1answer
1k views

Very slow write performance on Debian 6.0 (AMD64) with DMCRYPT/LVM/RAID1

I'm seeing very strange performance characteristics on one of my servers. This server is running a simple two-disk software-RAID1 setup with LVM spanning /dev/md0. One of the logical volumes ...
0
votes
0answers
356 views

OpenBSD and encrypted external HD for NAS - svnd or softraid?

I'm fairly new to OpenBSD but I'm trying to cobble together what you might call a poor man's NAS with an existing computer with OpenBSD and external hd. For this task, I'll have clients (both ...
2
votes
1answer
354 views

Migrating xp laptops with encryption to Windows 7

We are starting to look at migrating our systems to Windows 7 from XP. I've been playing with MDT 2010 doing automated installs and using USMT. I haven't started looking at how migrating xp laptops ...
5
votes
3answers
3k views

When to use Truecrypt, and when not to?

I have about 30 (this number will most likely grow over the next few years to 50 or more) unencrypted laptops that I have been tasked to encrypt (entire drive). These machines will be used off site ...
1
vote
2answers
465 views

Solaris, ZFS, Encrypted Boot to Secure Off Site Servers

We will be setting up a system for off site servers. All the hard disk data will be encrypted. The plan is to have a two part boot (if possible). The first part boots up and continually asks for the ...
0
votes
1answer
274 views

Encrypted partitions with redundancy on ubuntu server

Hey I have to make a file system with an encrypted partition with on ubuntu server. something like Unencrypted: / - 10 GB /home - 10GB /var - 5GB -------------- Encrypted: /opt - 50GB This I can ...
2
votes
1answer
2k views

What cipher is the “best” or better for LUKS?

I am looking for strong cipher for LUKS, currently I am thinking about SHA512, but encryption is not my cup of tea, so could you give me your hints, what are you using for encryption?
2
votes
2answers
1k views

Data encryption on VPS

I know there is no way to completely secure a running system, however I'd like to do do what ever is possible. I'm not sure how to phrase the question, but basically, I'd like to secure the data on ...
33
votes
12answers
8k views

What do you do about staff and personal laptops?

Today, one of our developers had his laptop stolen from his house. Apparently, he had a full svn checkout of the company's source code, as well as a full copy of the SQL database. This is one ...