Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

2
votes
0answers
26 views

how do I plan partitions for LUKS encryption of a CentOS 7 server?

A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
3
votes
1answer
1k views

Cannot read device /dev/loop0

I'm trying to create a crypted drive on my loop0 device. For this command /sbin/cryptsetup create cryptedDrive /dev/loop0 I'm getting the following error Cannot read device /dev/loop0 Here's ...
0
votes
1answer
31 views

How to save output from grub-md5-crypt to a file ?

I am using Cent OS 6.5 and I want to save the generated output and md5 hash from grub-md5-crypt command to a file. The grub-md5-crypt command asks us to set a password. I want the password(which I ...
1
vote
1answer
6 views

openssl smime message signing: why do I need a -certfile key?

Here is how one should sign a message with openssl smime? according to the docs openssl smime -sign -in in.txt -text -out mail.msg -signer mycert.pem \ -inkey mykey.pem -certfile mycerts.pem But ...
3
votes
2answers
88 views

Encrypting a file name in linux?

I'm trying to encrypt a file as well as its filename. Encrypting the file is fairly easy, I use gpg for that, but I can't figure out how to encrypt the filename as well. Would be great if the filename ...
1
vote
3answers
1k views

Bitlocker in Windows 7: how to change from USB key to PIN?

I've just encrypted my drives using Bitlocker but since I don't have TPM, I went with USB key. Is it possible to switch that method to PIN or is it too late now and I have to re-encrypt the drives?
2
votes
1answer
28 views

connection is encrypted and authenticated using 128. expecting 256

I have two servers that I have been working to configure to use modern ciphers. One is working and the other seems to be reporting mixed results. I'm not sure what the issue is. Specifically when I ...
2
votes
1answer
2k views

Outlook 2010 cannot reply to encrypted email

A coworker and I occasionally use encrypted email to send passwords. We both are using Outlook 2010, and both of our Digital IDs were created by the same authority. For my coworker, creating, ...
0
votes
0answers
11 views

EFS can decrypt a file but not re-encrypt after modification

I have a Windows 2008 R2 server with a shared folder containing an encrypted subfolder (EFS) for each user with important files. For security reasons 2 additional DRA's have been configured on the ...
0
votes
1answer
7 views

tinc - TCP Cipher method

In tinc 1.0.x there is Cipher param which allows to set encryption for UDP packets. For TCP packets encryption method is not allowed to be changed ...
0
votes
0answers
30 views

Openshift: SSH key denied, even though they match

I am attempting to use the OpenShift RHC tool on a Windows machine to ssh into one of my applications. The public key associated with my OpenShift account matches my .\.ssh\id_rsa.pub and I've even ...
4
votes
1answer
181 views

Kerberos KDC has no support for encryption type while getting credentials

I am configuring an apache/SSO authentication with an AD with Kerberos. My http server is a Debian Wheezy and the AD is a Windows Server 2012. I generated keytabs files on WS2012 with kpass command ...
-2
votes
2answers
67 views

Copy Files from one Linux server to another with Encryption [closed]

I want that when i copy files from one Linux server to another it should be encrypted. Also, there should be a log maintained as which files are uploaded from which IP just like ftp logs. The ...
0
votes
1answer
33 views

Mobile Encryption Password

I'm wondering what other people do for this. I have a client who needs to meet HIPAA Security Compliance. I have two things I'm wondering about. I need to encrypt all laptops that leave this ...
1
vote
3answers
10k views

Ubuntu: How to decrypt home directory, swap (basically everything) without reinstalling?

I just faced a problem with encrypted home directory in Ubuntu Server 10.04. While I know a workaround, I want to just to completely remove encryption from everything. Any hints how to do that ...
8
votes
4answers
6k views

Encrypted Remote Backups via Rsync?

I run a small modest CentOS server at my house for misc backups, etc. My friend on the other side of town also runs a small modest server at his house for similar purposes. We have been toying with ...
34
votes
13answers
64k views

How to create an SHA-512 hashed password for shadow?

The previous SF questions I've seen have lead to answers that produce MD5 hashed password. Does anyone have a suggestion on to produce an SHA-512 hashed password? I'd prefer a one liner instead of a ...
2
votes
0answers
17 views

Windows 8 GPT Encryption [closed]

I have to run encryption for HIPAA Compliance and ran into a snag. I have a Windows 8.1 Home with GPT Based drive. It does not have Bitlocker nor TPM, and VerCrypt doesn't support GPT Partitions. ...
1
vote
2answers
1k views

Bitlocker drive encryption on AWS Windows instance

I'm trying to figure out how best to protect the data of a single Windows Server 2012 instance on AWS and according to "AWS_Securing_Data_at_Rest_with_Encryption.pdf" it says: "Encrypting Amazon ...
0
votes
1answer
57 views

Simple encryption for Samba shares

I have an Arch Linux machine acting as an SSH and file server, using vsftpd for FTP and samba for SMB. I would like to access this server via SMB over the Internet, and it is currently set up to ...
2
votes
1answer
66 views

Is the Outlook OST cache file encrypted?

Is the OST cache file created by Outlook encrypted? I understand that Outlook won't open the file unless it can connect to the user's Exchange account, but I'm wondering if there's a possibility that ...
0
votes
0answers
15 views

Encrypted network share for multiple users

I have the following scenario: 100GB of data 5 users should be mounted on two different servers the servers are all running Ubuntu users are accessing/writing to it at the same time (not the same ...
0
votes
1answer
119 views

Ho to encrypt part of config data file?

I work in small company. When i am going on holiday i had to take root access to my junior. That junior could give access to another man. Unfortunately I can't control this proccess. I would like that ...
3
votes
1answer
23 views

Determining encryption container name corresponding to machine key in %ProgramData%\Microsoft\Crypto\RSA\MachineKeys

On Windows, encryption machine keys are stored in: %ProgramData%\Microsoft\Crypto\RSA\MachineKeys How do I determine the corresponding container name for each key? I'm guessing this vagueness is by ...
4
votes
2answers
125 views

Is there a way to make encryption default per contact in Thunderbird?

I administer several computers that have Thunderbird installed. I know Thunderbird has an option to require all email to be encrypted. However, I would like a way to allow unencrypted email ...
2
votes
2answers
161 views

Database backup encryption

I've been trying to work out an effective database backup encryption scheme lately. I have a Postgres 9.4 server, I have most of the backup scheme fleshed out I think. Backups will be stored in a ...
4
votes
1answer
684 views

Traffic in a AWS virtual private cloud

On Amazon AWS, should I encrypt sensitive traffic between instances in a virtual private cloud? More specifically, is the traffic between the instances in such a VPC private as in a virtual network, ...
0
votes
0answers
49 views

McAfee Drive Encryption issues with HP Elitebook 755 G2

Hi all (Sorry if this isn't the right forum to post on), I have a slightly frustrating issue involving a small collection of HP laptops and McAfee Encryption. We can encrypt the laptops absolutely ...
1
vote
3answers
3k views

What are the steps to TDE encrypt a SQL Server 2008 database?

We have been trying the steps here: http://msdn.microsoft.com/en-us/library/cc278098.aspx but keep getting this error: Msg 15151, Level 16, State 1, Line 1 Cannot find the certificate 'tdeCert', ...
11
votes
2answers
1k views

Encryption over gigabit carrier ethernet

My conclusion to this was to pipe VLAN trunks through EoIP tunnels and encapsulate those in hardware assisted IPSec. Two pairs of fairly inexpensive Mikrotik RB1100AHx2 routers proved capable ...
0
votes
2answers
40 views

encrypt mariadb database files

I'm currently setting up an installation of mediawiki on arch linux using nginx and mariadb as a database. Since it will be a private wiki I would like to encrypt the database files using veracrypt. ...
0
votes
0answers
42 views

Does coreos' cloud-init have something similar to ansible's vault?

I'm trying to setup ssl keys and certs onto a coreos machine, on the previous ubuntu machine I was using, I had ansible's vault encrypt the key and cert for source control and decrypt it when adding ...
2
votes
1answer
42 views

Hyper-V Guest data encryption

I have a new requirement to encrypt the data inside an sql database while it is at rest. So far I've looked at Bitlocker (see below), and other commercial products (I won't name because I'm not ...
2
votes
2answers
132 views

Determining if an SSL cert is affected by SHA-1 phase-out

Google chrome will start to warn users that their SSL connection is insecure under the following conditions: The cert uses the SHA1 hashing algorithm, and The cert expires on or after 2016-01-01 (or ...
0
votes
0answers
5 views

TPM Drive Encryption / Network Profile

I have the following situation: I have an old application that cannot be rewritten for various reasons that I can't go into. Just noting that refactoring the source of the problem is a total no-go. ...
3
votes
1answer
1k views

Why don't Active Directory user accounts automatically support Kerberos AES authentication?

I'm playing around with a test domain on Windows Server 2012 R2. I'm operating at the highest possible functional level and have no backwards-compatibility issues in my small test environment. ...
0
votes
1answer
64 views

What would be a less-known SSL certificate attribute to look out for? [closed]

I'm looking for a simple domain SSL certificate for our company's website and I'm a little confused. A lot of them seems to offer the exact same features, yet at price ranges going from 5$ / year to ...
0
votes
2answers
25 views

How to handle passwords in a script: in-memory VS on-file

I have a script that runs on a VPS in a cheap cloud provider. The scenario is: I trust my provider, but I prefer to make his life hard if he ever wants to steal my key. All the interested folders in ...
3
votes
0answers
23 views

Anubis as GPG proxy

I'm trying to setup GNU Anubis to act as a sort of proxy to sign/encrypt emails coming from a service. The service is currently configured to send email using our SMTP server. The idea would be to ...
2
votes
1answer
983 views

SQl server 2008 permission and encryption

i have made columns in some of the tables encrypted in sql server 2008. Now as i am a db owner i have the access to encode and decode the data using the symmetric key and certificate. But some other ...
2
votes
1answer
191 views

Mounting encrypted Samba share (linux server/client)

I'm trying to set up encrypted samba access. In order to achieve that I've added 2 lines to [global] scope in smb.conf: server signing = mandatory smb encrypt = mandatory But unfortunately I can't ...
0
votes
1answer
55 views

Root cannot access a directory - access denied

Under Linux (Ubuntu 14LTS), I'm trying to access an encrypted local directory created by a regular user (encfs) as root, but I get access denied: root@toad:/home/robert# cd inbox bash: cd: inbox: ...
0
votes
0answers
31 views

Does my SSL cert have anything to do with or say about the symmetric session key?

The answer found on this server fault thread is my jumping off point for this general topic: http://serverfault.com/a/313558 ... and this question can be thought of as a follow-up to that answer. ...
1
vote
0answers
49 views

Password mismatch in dovecot with postafixadmin

After many hours trying to set up a new mail server, I just can't figure out why the passwords which postfixadmin store are a mismatch with what dovecot passes for authentication. In postfixadmin, ...
0
votes
0answers
31 views

Creating a grow-on-demand encrypted volume with LUKS

I am trying to create an encrypted, growing-as-needed file system in with Linux. I am familiar with LUKS and cryptsetup. I can create an empty file: fallocate -l 512M /root/image I can create a ...
6
votes
2answers
4k views

Configured MySQL for SSL , but SSL is still DISABLED..!

I configured SSL for MySQL using the following script. #!/bin/bash # mkdir -p /root/abc/ssl_certs cd /root/abc/ssl_certs # echo "--> 1. Create CA cert, private key" openssl genrsa 2048 > ...
0
votes
1answer
87 views

How to find mainboards that supports Self Encrypting Device (SED) in BIOS?

There should exist mainboards that support Self Encrypting Device (SED) in BIOS, so when connecting a SSD which have SED support, and SED have been enabled in the BIOS, it prompts on bootup for ...
0
votes
1answer
15 views

SNMP access with encryption

I'd like to configure my SNMP v3 (NET-SNMP) agent to limited user range with encryption. Could you give me a short hint how to setup encryption with NET-SNMP? Do you have any experiences in using ...
3
votes
1answer
65 views

Bitlocker device name change

When imaging our PCs we generally create a temp name for our facilities to change the device name to whatever particular department fits their needs. The issue is we can't send out any devices without ...
2
votes
1answer
291 views

How to send “ATA Secure Erase” command to SSD?

A very good way to erase a SSD which have SED support is to change the password/key. But what to do with those that doesn't have SED support? This article says Fortunately it is possible to erase ...