Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

0
votes
2answers
386 views

Automate HP ProtectTools using MDT

Our company is currently using HP ProtectTools to perform Drive Encryption on our HP laptops. I recently built an MDT 2012 Deployment Share to automate our imaging process and would like to find a way ...
5
votes
5answers
1k views

Windows Server - any way to prevent file encryption?

I'm not talking about EFS or Bitlocker here. I'm asking if there's a way to prevent files from being encrypted. I'm referring to some extent to ransomware, but specifically I want the following ...
16
votes
2answers
19k views

Is MySQL port 3306 encrypted, and if no, how can I encrypt it?

I am working through a security audit for a system at my work and one of the requirements is to encrypt all traffic through public/unprotected networks. Since we are accessing the MySQL database (over ...
1
vote
0answers
15 views

Can't read old UFS1 superblock using GELI (Blowfish-CBC) on FreeBSD

Trying to add encrypted partition on FreeBSD10.3 GELI/Blowfish-CBC. AES on / and /swap works fine, but I can't add an additional encrypted partition using Blowfish. Here is the way I did it: # mount -...
0
votes
0answers
12 views

Ipsec with public encryption domain?

my partner require a public encryption domain for an ipsec tunnel. With this configuration: IP address: A.B.C.7/32 Encryption domain: A.B.C.128/25 My question is: if all my traffic is tunneled ...
0
votes
1answer
1k views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
4
votes
1answer
3k views

Outlook 2010 cannot reply to encrypted email

A coworker and I occasionally use encrypted email to send passwords. We both are using Outlook 2010, and both of our Digital IDs were created by the same authority. For my coworker, creating, replying,...
10
votes
3answers
2k views

Encrypt git repository on server (safe against theft of physical hardware)

I have a production server (Ubuntu, running 24/7) with a git repository and some client computers each with a working copy of this repository. In the client computers, simply using home folder ...
4
votes
1answer
1k views

Kerberos KDC has no support for encryption type while getting credentials

I am configuring an apache/SSO authentication with an AD with Kerberos. My http server is a Debian Wheezy and the AD is a Windows Server 2012. I generated keytabs files on WS2012 with kpass command ...
0
votes
1answer
20 views

Group policy setting to prevent asking user where to store recovery key

Win10 PCs, 2012R2 domain I'm rolling out bitlocker to clients and I'm trying to restrict the options in the bitlocker wizard as much as possible. I do need users to run the wizard so they can set a ...
2
votes
1answer
320 views

how do I plan partitions for LUKS encryption of a CentOS 7 server?

A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
1
vote
2answers
27 views

Securing Mail From Admins - Office 365

I'm trying to determine the best solution that allows me to assure our CEO that his Office 365 mailbox cannot be read by anyone, including myself, an admin. Obviously the mailbox is already locked ...
6
votes
1answer
60 views

Can I recover a bitlocker encrypted drive offline?

Windows 10, server 2012 R2 domain I'm confused about the options for recovering a bitlocker encrypted drive offline. Lets say I'm encrypting the HDDs of domain computers with bitlocker using TPM (...
3
votes
3answers
284 views

Gmail flagging Dovecot email as insecure

I thought I successfully secured my Postfix/Dovecot email server. I have a signed certificate from LetsEncrypt, which is valid for my domain. Sending & receiving works fine, but since Gmail ...
1
vote
0answers
11 views

What is the correct way to secure a user directory with EFS not in a domain network?

Logged in as an administrator on a Windows 10 machine. cipher /E /A /S:C:\Users\MYUSER or cipher /E C:\Users\MYUSER I've read and been told that the bottom one is the correct way. End result: ...
0
votes
0answers
50 views

ldaps on Debian Jessie with let's encrypt certificate

I'm already struggling for a while to set up an LDAP-Server on debian Jessie with enabled TLS. I'm new to the topic, so please show me my mistakes. I started by installing an reconfiguring slapd apt-...
0
votes
1answer
30 views

Bitlocker decryption trouble

today I started the procedure to access a bitlocker encypted data storage hard disk. At first I unlocked it and then I turned off bitlocker. The turning off took some time, but it ended without any ...
0
votes
1answer
44 views

xcopy & robocopy - Encrypted during transfer?

I need to transfer some files on some windows hosts, as i come from the unix side, i searched for a tool similar to scp or rsync. I came across xcopy and robocopy and searched the manuals for a hint ...
11
votes
3answers
5k views

Is it possible to have a 100% secure virtual private server?

I am curious if it is possible to have a VPS that has data on it that is not readable by the hosting provider, but is still usable on the VPS. Obviously there are some things that you could do to ...
0
votes
0answers
24 views

DELLs iDRAC integrated VNC Server not working with encryption enabled

since I allready posted on two GitHub Communitys about this issue, I will try to keep this as short as possible. The GitHub Postings are added for reference at the end of the post. Im trying to ...
0
votes
0answers
13 views

Archiving files to an encrypted destination

I am setting up a new SPLUNK installation (fairly small scale, Windows), and it has been requested that I "encrypt the data". Further questioning got my requirement to be that: 30 - 60 days ...
0
votes
0answers
41 views

HAproxy ssl re-encryption and http header modification

I want to use my Haproxy 1.6.5 as Https load balancer before my https servers but I stuck with a problem of misunderstanding . I want this behaviour: haproxy is available as https://example.com but ...
0
votes
0answers
17 views

OwnCloud user: enable password recovery by default

I have an ownCloud server with server side encryption enabled. My test showed that creating a new user disables the password recovery. Is there a way to enable password recovery by default? If not, ...
0
votes
1answer
45 views

Does encyption key contain passphrase?

I created an encrypted pool in Freenas 9.10 using the provided Wizard. Afterwards i input a passphrase for the volume. The Handbook advises me to download and store the Recovery Key: Download Key:...
0
votes
0answers
10 views

EFS and Always Encrypting new files

I have an issue where files are not always being encrypted. I did a right click and set to encrypt all and subfiles and when files were dropped they kept being encrypted. As of right now, new files ...
2
votes
6answers
5k views

How to Crypt an sh script into Linux Environnement?

I've a tinny question, how can I crypt my scripts? I mean, for exemple, sometimes I've some sh scripts (provided by some company like VMWare) and when I VI's it they just show me a crypted file and ...
6
votes
2answers
252 views

Can Squid be used as “TLS termination proxy” to encrypt TCP connections using client certificates?

Abstract I need an encrypted TCP connection from multiple clients to a single port over the internet. Can this be realized with Squid? Concrete situation We use a monitoring and client management ...
0
votes
1answer
1k views

how to use GPG to decrypt multiple files to a different directory

I am trying to decrypt multiple files to a different directory keeping the existing filenames. When i run the below syntax it seems to decrypt them ok but it only ouputs to the screen. I would like to ...
0
votes
1answer
23 views

Gmail marking self-signed certs as unencrypted

Just a quick question/answer pair to share what I've learned this morning. Gmail marks self-signed certs for TLS as unencrypted in their interface now. This is obviously wrong. How has anyone else ...
0
votes
2answers
56 views

How to convert a unencrypted EBS to be encrypted

I have a number of older EBS volumes that are not encrypted. In satisfying new corporate security measures, all data needs to be "encrypted at rest" so I need to convert all of the volumes to be ...
1
vote
1answer
67 views

Digital signature with openssl

I am trying to sign and verify a signature using an RSA key-pair. Here is how I generate the key pair (which work fine for encryption / decryption): ssh-keygen -t rsa -f mykey -N '' -b 2048 mv ...
4
votes
1answer
112 views

Samba TLS Setup

I'm reading this Samba Manpage and according to this, you can setup TLS. I've got 2 questions. On the Server-side, TLS options requires the path of the certificate and keys? How would that work on ...
0
votes
0answers
31 views

Does CloudFront support S3 signature version 4 for KMS encrypted objects?

I'm using Cloudfront with an S3 origin that is using KMS to encrypt objects. I'm getting the following error when sending a GET request for an object in the S3 bucket. Requests specifying Server ...
1
vote
2answers
129 views

How do I configure an e-mail service to provide (close to) zero-knowledge?

DISCLAIMER – I'm fishing for ideas, so I can see that some people will start downvoting and flagging this as unsuitable for SF, but hey, if you know of a better place to ask this question, there is a ...
0
votes
2answers
89 views

Installing blowfish2 for use in VIM on CentOS 7

I'm moving from a Debian-based distro to CentOS 7. I have files encrypted with blowfish that I edit transparently in VIM with this setting in ~/.vimrc: :set cryptmethod=blowfish2 This is the error ...
2
votes
2answers
43 views

Is it possible to encrypt a virtual machine or container so the host is not able to read any of its data? [duplicate]

I'm wondering whether it would be theoretically possible for a cloud hosting provider to run an application for a customer where the customer doesn't trust the hosting provider with the data in the ...
1
vote
0answers
66 views

Use postfix through a proxy. How should it be configured?

Postfix by default uses ports 25, 465 and 587. In my configuration, I enabled TLS encryption using the option smtpd_use_tls=yes in postfix's main.cf. This makes all smtp communications encrypted as ...
-1
votes
1answer
74 views

How to encrypt boot partition in CentOS 7 kickstart?

I have a kickstart file for CentOS 7 Minimal. I would like to add encryption only to my /boot partition. but when I added the following line in the kickstart file, the complete installation fails. The ...
1
vote
1answer
9 views

Remote Entry of PRE-BOOTDrive Encryption Key

I have a client with approximately 30 machines in a domain and each machine has Endpoint Encryption requiring a key to be entered at the machine keyboard each time the system is rebooted. These are ...
0
votes
1answer
139 views

How to disable 112 bits cipher suite in ssl of a java server

How to disable 112 bit cipher suite on java application server. Specifically these one. TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA ...
0
votes
0answers
12 views

Secure an external linux distro

I have a fairly complex situation, I have researched all the parts required before asking this question. I am trying to make a bootable linux distro on which I have an app that is located on an ...
0
votes
0answers
35 views

Rsync backup to veracrypt-encrypted USB memory stick results in errors

I have created encrypted USB memory stick using Veracrypt for backup. First sync went ok, now trying to update it results in error. I'm using this command after mounting the volume: sudo rsync -...
0
votes
3answers
344 views

Encrypting all internal communication on an ESXi box

Lets say I have a large system made up of many VMs running on one bare metal esxi box. Each of these VMs are running application(s) that are necessary for the system. I do not have the ability to ...
1
vote
0answers
37 views

OpenVPN with CryptoAPI on Linux

I have an OpenVPN config file that uses Microsoft CryptoAPI. Meaning, it contains these lines: cryptoapicert "SUBJ:..." ca ca_file.crt tls-auth tls.key It works fine on a Windows system. However, ...
-4
votes
3answers
62 views

How to quickly encrypt a 200GB file? [closed]

I need to encrypt a 200gb file. Using 7z, on a pretty fast win2012 server, it is going to take 12 hours (using the fastest option). Is there a faster way?
3
votes
0answers
126 views

gmail this message was not encrypted [closed]

I just moved my site to another hosting provider. I use SSL/TLS for connection security and port 995. It sends my messages but the problem is that gmail shows This message was not encrypted red flag. ...
8
votes
3answers
4k views

Encryption with ZFS on linux

Does ZFS on Linux already support Encryption? If not, is it planned? I found tons of info for ZFS+LUKS but that's absolutely uninteresting: I want ZFS encryption so that I can do replication using ...
0
votes
2answers
23 views

Securing a forward proxy connection

I have a huge network with around 1000 users. We use squid(3.1.x) as forward caching proxy server, and we also authenticate our users to allow them access to the internet (helps us log what a ...
2
votes
6answers
14k views

Is IPSec the only way to encrypt Microsoft SMB (CIFS) traffic?

I'm looking for ways to encrypt Microsoft SMB data traffic between a client and Windows server or filer appliance. This is not about encrypting the authentication but the actual data transfer. Is ...
0
votes
1answer
44 views

Automatically encrypt application files on Linux

I get requests from customers where they have an application dump files into the FS on linux and want those files to be automatically encrypted. Not in the sense of an enrypted FS, but in a way that ...