Questions tagged [encryption]
Encryption is transforming information through a cipher to protect it from unauthorized access.
778
questions
1
vote
0
answers
48
views
EJBCA Response Envelope encryption - DES algorithm phase out for iOS devices
As per Apple WWDC this year, DES encryption algorithm will be phased out soon.
I noticed that DES is the hard coded encryption algorithm in ScepResponseMessage.java in EJBCA's code.
...
1
vote
0
answers
108
views
How does bitlocker drive encryption recognize and accept system changes?
I'm relatively new to bitlocker drive encryption, although I do have a decent understanding of how it works. My question here is that, if I have a system that has bitlocker drive encryption enabled ...
1
vote
0
answers
90
views
What is the correct way to secure a user directory with EFS not in a domain network?
Logged in as an administrator on a Windows 10 machine.
cipher /E /A /S:C:\Users\MYUSER
or
cipher /E C:\Users\MYUSER
I've read and been told that the bottom one is the correct way.
End result: ...
1
vote
0
answers
985
views
Fetchmail and Procmail set up with TLS
I'll start by saying I'm pretty uninformed when it comes to mail protocols, encryption, and basically everything else relevant to this question.
My goal is to set up fetchmail/procmail on a machine ...
1
vote
0
answers
21
views
VPN connection drops when using encryption
I have set up VPN server on Windows Server 2012
If I use encryption to connect to the VPN server the connection would drop after 20min, If I dont use encryption the coonection stays fine. The client ...
1
vote
0
answers
32
views
Web encryption on uncontrolled LAN
I have a situation in which I wish to produce (physical hardware) widgets that plug into a LAN and act as a web server, serving content to web clients that are also on the LAN.
The traffic from the ...
1
vote
1
answer
2k
views
How to enable LDAP over SSL/TLS in AD without installing AD Certificate Services
I am installing a Sonicwall firewall into my organization. I've connected the Sonicwall with the Active Directory domain, however now on the status page of the appliance there is a huge warning:
...
1
vote
1
answer
959
views
how do I plan partitions for LUKS encryption of a CentOS 7 server?
A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
1
vote
0
answers
1k
views
Remmina TLS, NLA works, but high encryption fails
Remmina works fine with TLS and NLA. But if encryption is set to high instead of client compatible, then it stops working.
Questions:
1. Why setting high encryption prevents connectivity?
2. What's ...
1
vote
0
answers
583
views
Debian KVM Host, Debian guests : where full-disk encryption should be done?
I have a host under Debian Wheezy, running qemu/KVM.
I want to have all my guests fully-encrypted.
I can see to possibilities :
- Either I encrypt the LVM Volume using dm-crypt (cryptsetup) and use ...
1
vote
0
answers
84
views
Most secure way to encrypt critical data to be shared, edited and seen (must ALWAYS be secure)
This question does not rely on time... so it's not about keeping data on tape or anything similar.
I have 3 distinct PCs with critical information. PCs are running Windows OS. They all hold critical ...
1
vote
1
answer
648
views
Storing Postfix's passwords in MySQL without encryption
I've been struggling with Postfix for past few days. Finally I managed to set it up with virtual mailboxes listed in MySQL and passwords encrypted with PAM. It was just then that I realized I need the ...
1
vote
0
answers
2k
views
How to change IIS Express Virtual Directory password encryption provider?
In Visual Studio 2012 I'm working on an ASP.NET MVC application which requires a Virtual Directory under the main application directory called "Shared". This happens to point to a UNC path, so I need ...
1
vote
2
answers
238
views
Office 365 E3 with Exchange Hosted Encryption (EHE)
I have a client who wants to move to Office 365.
They are currently running on a trial of Office 365 E3 plan.
My staff are now also using Office 365 E3 via the internal use licenses provided as part ...
1
vote
0
answers
344
views
udev rule for disconnection and hibernate/suspend
I have an external hard drive which contains different GPT partitions. One of them is a LVM partition. This partition is contained in a LVM volume group (called "volga"), which in turns splits into ...
1
vote
0
answers
163
views
Expanding raid5 software raid
I have recently bought 4 2TB drives to expand my existing 4*2TB raid5 setup, using mdadm software raid in debian. As a initial step, I have created a raid5 on the four new drives and created an ...
1
vote
0
answers
320
views
Can samba authentication be coupled to file encryption? What about WebDAV?
I'd like my NAS (Buffalo LinkStation Pro running Linux 2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux) to share an encrypted filesystem to the Windows clients as transparently as possible. ...
1
vote
1
answer
121
views
How to securely control access to a backend key server?
I need to securely encrypt data in my database so that if the database is dumped, hackers are unable to decrypt the data.
I'm planning on creating a simple key server on a different machine, and ...
1
vote
0
answers
2k
views
How to encrypt a section within web.config using aspnet_regiis -pe or -pef
I am a developer trying to encrypt part of my web.config file in an ASP.NET site (first time I've tried this...).
Having repeated failures with all types of syntax changes, so perhaps better to post ...
1
vote
1
answer
1k
views
DB encryption for Django web app without storing key on server
We are setting up a virtual private server (not hosted by us), on which we will be user testing our Django-based web application. The user-generated content produced in these tests will be very ...
1
vote
1
answer
1k
views
Encryption on Solaris (using Keystore)
I am trying do draft up a secure way to encrypt (on the fly, invoking it from an app) and decrypt sensible information (credit cards) using AES-256.
The target platform is:
cat /etc/release
...
1
vote
1
answer
2k
views
Cisco 877 VPN: PPTP encryption not working
A followup to this question.
I have a Cisco 877 ADSL router configured (at last!) to act as a VPN server; it supports both PPTP and L2TP VPNs, and I can successfully connect to it from Windows ...
1
vote
1
answer
109
views
Does MS SQL 2005 encryption protect data in the case of physical server access?
I am looking into MS SQL 2005 encryption (not 2008, so TDE is out), and I believe I understand the concept of how a column is encrypted. The OS uses the service credentials to encrypt the service ...
1
vote
0
answers
71
views
Suggestion for encrypting database files in SQL 2008 Standard Cluster
I have an SQL 2008 Server configured as a fail-over cluster an have a requirement to have the database files (mdf/ldf) encrypted. We have tried to use EFS for this but there are a lot of issues doing ...
1
vote
1
answer
1k
views
Should I encrypt my home directory (Ubuntu Server)? Case scenarios: Dev Server, Production Server, Desktop, etc
I did some searching and found that the biggest downfall is performance. How big is the difference between encrypted vs non-encrypted?
What types of setups would you use it for and which wouldn't?
...
1
vote
1
answer
101
views
mount server as external encrypted HD?
i have a few projects using git and i'd like to have a remote backup available in case our network goes down. I know how to create a bare git repository and push to it but how do i encrypt the ...
1
vote
3
answers
4k
views
Encrypt entire Linux drive with TrueCrypt
I've found plenty of info online about how to encrypt a drive with TrueCrypt, but everything I found was either outdated or not for Linux.
Here's what I'm after: I want to encrypt my entire drive (...
1
vote
4
answers
169
views
Checkout Laptops Imaging and Encryption
We have about 20 laptops (windows xp or 7) that we're getting ready for checkout at a library. People will be using these laptops anywhere from 1 day to 3 months.
We have a few issues because of new ...
1
vote
1
answer
1k
views
Linux: Encryption of a physical LVM volume doesn't imply encryption of its logical subvolumes?
I installed OpenSuse one year ago on my notebook. I created all partitions except /boot inside an LVM partition. I enabled encryption for it during setup. The system asked me a password on each boot ...
1
vote
1
answer
1k
views
Are there any encrypted file systems available for Solaris 10?
BACKGROUND:
We are running Unidata 7.2-5 on Solaris 10 for our data warehouse. There is no database encryption option that works well with our applications. We were looking at ZFS, but it seems that ...
1
vote
3
answers
1k
views
Encryption container for multiple people
I was just wondering if anyone may have come across a product that would allow for a container based encryption to be used by multiple people, in a Windows Server setup.
I wanted to see if there ...
1
vote
1
answer
10k
views
SqlServer 2008 How to correctly install/configure SSL certificate to require encrypted connections
SqlServer 2008 instance is installed on Windows Server 2008 and is running under this identity: NT AUTHORITY\NETWORK SERVICE
SSL cert from third-party CA has been installed in Local Computer\Personal ...
1
vote
1
answer
1k
views
Modify SonicWALL Global VPN Client Encrypted RCF
Presently rolling out VPN to access to a small office. I am using a SonicWALL TZ-170 running SonicOS Enhanced 3.4.1.0-2e. I've created an encrypted RCF file for the clients to import into the ...
1
vote
1
answer
97
views
Using the -H Option to Create Users with the pw Utility
I'm using pw to add users to a FreeBSD system and I'd like to use the -H option, e.g.,
pw add user userfoo -H pwfile
The man page says that I need to have a password "supplied already encrypted in a ...
1
vote
2
answers
451
views
Is it possible to create a full "encrypted worried about privacy" VPS, but still being externally usable?
I've been reading a lot of things about privacy, "being in control of your data" and everything, and now a project called diaspora* is trying to be an OSS Facebook alternative.
Fact is: you still ...
0
votes
4
answers
146
views
Preventing programmer from copying information
Is there a way to block files, coding, etc. from being copied when giving a new programmer ftp access to do research prior to submitting a quote?
0
votes
2
answers
465
views
Encrypt nginx log files
Is it possible to encrypt nginx log files? If so, would the logrotate saving time the best time to do so?
The background for this is that the client is concerning about security issues that can happen ...
0
votes
1
answer
178
views
How to see if data is encrypted
Is there an easy way to tell if I am successfully encrypting transfers between me and my database? Can I look at the network monitor or something that will tell me?
NOTE: I am new to any sort of ...
0
votes
1
answer
493
views
Ho to encrypt part of config data file?
I work in small company. When i am going on holiday i had to take root access to my junior. That junior could give access to another man. Unfortunately I can't control this proccess. I would like that ...
0
votes
1
answer
213
views
TrueNas Encryption method changed - Is the data safe?
just a quick question of understanding. I have a TrueNas Scale server and I just changed the Encryption method from key to passphrase. Now I wonder if I need to rewrite the whole dataset for this to ...
0
votes
3
answers
337
views
Does this hard disk drive support hardware-based full disk encryption? What are some effective interrogation tactics?
I am trying to determine if a particular hard disk drive supports hardware-based full disk encryption. I know I can use the model number and check the manufacturer's website, but that is only feasible ...
0
votes
2
answers
5k
views
Encrypting an ODBC connection
Situation:
We have a SQL Server 2008 R2 database sitting in a data centre
We would like to allow analysts to connect to the database and query the data using desktop based tools (e.g. Tableau) via ...
0
votes
3
answers
206
views
my local backup request
So our current backup system has stopped working. We had 4 harddrives on rotate, each taking 2 days and sunday being skipped. Each backup doing a FULL backup. I did NOT design this!
All 4 harddrives ...
0
votes
3
answers
1k
views
Encrypting all internal communication on an ESXi box
Lets say I have a large system made up of many VMs running on one bare metal esxi box. Each of these VMs are running application(s) that are necessary for the system. I do not have the ability to ...
0
votes
1
answer
234
views
How do I eject an encrypted disk while Postgres is running on Mac OS X? [closed]
I've created an encrypted volume with TrueCrypt that is currently mounted on Mac OS X (v10.6.6). I have moved both MySQL and Postgres (v8.4) data to my encrypted volume and created symlinks to them. ...
0
votes
2
answers
1k
views
Execute encrypted files but don't let anybody read them
I want to provide a virtual machine image with an installed web application. The user should be able to boot the vm (don't login, just boot) and a webserver should start automatically.
The point is I ...
0
votes
2
answers
257
views
Mysql remote encryption
I'm using a remote connection to mysql. Both the webserver and the server with mysql on it will use internal ip addresses to connect.
1) Is encrypting necessary?
2) Is their a built in / simple way ...
0
votes
4
answers
2k
views
Best Encrypted Backup Solution for Windows and Linux servers [closed]
I am looking for advice, and hopefully there are people here with experience that have suggestions. I have a Linux SAMBA File Server that has financial data on it that I want to backup to a remote ...
0
votes
1
answer
3k
views
Disabling the AES cipher suites without ECDHE key exchange algorithm
Currently, we are having below cipher suites used in our platform.
AES128-GCM-SHA256
AES128-SHA256
AES128-SHA
ECDHE-RSA-AES128-GCM-SHA256
ECDHE-RSA-AES128-SHA256
ECDHE-RSA-AES128-SHA
Post ...
0
votes
2
answers
3k
views
How to disable Null and Weak Ciphers on 389-Directory-Server
I am running 389-DS on CentOS. Version - '389-ds-base.i686 1.2.11.15-34.el6_5'. Security scans revealed that NullCiphers were found on Port 389 and 636.
I tried to disable them by shutting down DS, ...