Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

3
votes
2answers
418 views

Do I need to back up the SQL Server Encryption Password and Symmetric Key?

I'm trying to setup SQL Server to use Cell-Level Encryption on some sensitive data. It seems straightforward per this example on the MSDN: Create the Master Key with a strong password. Create a ...
1
vote
2answers
1k views

Bitlocker drive encryption on AWS Windows instance

I'm trying to figure out how best to protect the data of a single Windows Server 2012 instance on AWS and according to "AWS_Securing_Data_at_Rest_with_Encryption.pdf" it says: "Encrypting Amazon ...
1
vote
2answers
190 views

Office 365 E3 with Exchange Hosted Encryption (EHE)

I have a client who wants to move to Office 365. They are currently running on a trial of Office 365 E3 plan. My staff are now also using Office 365 E3 via the internal use licenses provided as part ...
0
votes
2answers
606 views

Apache SSL unencrypted RSA private key readable by php scripts?

For reference, this question is related to the following ones; but they do not provide the answer: Storing RSA Private Key un-encrypted ...
2
votes
1answer
257 views

EFS Recovery Agent not working

I know EFS data recovery has been discussed so many times in the forums but I could not find anything useful in the other threads as I believe I have followed all the required steps but still cannot ...
2
votes
1answer
97 views

Sharing ENV variables between multiple linux servers

I need to be able to share ENV variables between multiple linux servers. These variables are used by my application. I'd like to keep these variables in sync between all servers. Application ...
2
votes
1answer
1k views

Outlook 2010 cannot reply to encrypted email

A coworker and I occasionally use encrypted email to send passwords. We both are using Outlook 2010, and both of our Digital IDs were created by the same authority. For my coworker, creating, ...
2
votes
1answer
265 views

Access denied to EFS encrypted files after PC joins domain

I'm experiencing strange behavior with Windows Encrypted File System: I have a machine that is in workgroup mode (not joined to a domain) I encrypt an entire directory structure on the machine ...
1
vote
1answer
350 views

DB encryption for Django web app without storing key on server

We are setting up a virtual private server (not hosted by us), on which we will be user testing our Django-based web application. The user-generated content produced in these tests will be very ...
1
vote
1answer
641 views

Encryption on Solaris (using Keystore)

I am trying do draft up a secure way to encrypt (on the fly, invoking it from an app) and decrypt sensible information (credit cards) using AES-256. The target platform is: cat /etc/release ...
1
vote
1answer
550 views

Secure communication between linked SQL Servers

Is the data transferred between two linked SQL Servers protected (encrypted) by default? If not, is there a way to accomplish this? I have two SQL Server 2005 databases running on separate servers, ...
0
votes
1answer
59 views

What ciphers do I need to disable in tomcat to match a specific apache conf?

I have instructions to disable weak ciphers in apache by adding SSLCipherSuite ALL:!MD5:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM to my httpd.conf. I am actually running tomcat, and in my ...
0
votes
1answer
20 views

Using samba password to encrypt partition

I have a local server with encrypted partition just for data, which I want to serve through samba server. I want to avoid re-entering password on each server start (e.g. on electricity failure) for ...
0
votes
1answer
243 views

Problems saving encrypted emails from Outlook into Document Management System

We use a commercially available Document Management System (DMS) which integrates with Microsoft Outlook 2010. This allows users to save important emails in the DMS so that their colleagues have ...
0
votes
1answer
286 views

how to use GPG to decrypt multiple files to a different directory

I am trying to decrypt multiple files to a different directory keeping the existing filenames. When i run the below syntax it seems to decrypt them ok but it only ouputs to the screen. I would like to ...
0
votes
1answer
56 views

Login to openvpn web GUI after change IP

My provider just changed my IP address. How can I login to my web GUI with my new IP address? Thanks in advance.
0
votes
1answer
190 views

Can encfs be compromised if attacker knows a file name on the encrypted file system?

Good morning, I was wondering, if encfs also encrypts the file names (presumably using the same key as that used to encrypt their contents) such that each encrypted filename or directory corresponds ...
0
votes
1answer
245 views

EncFS and automated back-up

When using EncFS to encrypt a file on a VPS, will the file be stored encrypted or unencrypted in the automated back-ups taken by the host? (Assuming that the file is unlocked when the back-up is ...
0
votes
1answer
327 views

Does MySQL support Intel's AES-NI instructions?

I know that MySQL has the AES_ENCRYPT and AES_DECRYPT instructions; do they use Intel's AES-NI instructions? Are there other encryption options in MySQL and do they support AES-NI? Secondly, if MySQL ...
0
votes
1answer
158 views

S3 backup: bucket vs. volume

I've inherited a project that has been pushing encrypted (GPG) DB backups via a backup script to an S3 bucket. That's all been well and good, but now that bootable EBS instances (where the project ...
0
votes
1answer
430 views

Script encrypting Mails on Server [Maildir/GPG]

The idea is to encrypt [cronjob] all mails older than x days with a certain [per user] PGP Key. Mails are stored in Maildir format. Are you guys aware of an existing solution to this? Or maybe ...
-1
votes
1answer
31 views

Linux private file encryption

I need to store and secure clients files. I would like to encrypt files and not being able to open it. Only file owner can open his file. I think I’ll have to generate private key for each customer. ...
-1
votes
1answer
615 views

Filesystem encryption settings during install?

I'm installing CentOS 6.1 on a server and exploring the encryption settings in combination with software RAID. Should I encrypt the drive partition, the software RAID device, or both? Should I ...
2
votes
0answers
40 views

Kerberos KDC has no support for encryption type while getting credentials

I am configuring an apache/SSO authentication with an AD with Kerberos. My http server is a Debian Wheezy and the AD is a Windows Server 2012. I generated keytabs files on WS2012 with kpass command ...
2
votes
0answers
79 views

How to use an encrypted disk without needing an unencrypted boot partition

I would like to know if there is a way to encrypt a linux system which does not require a small unencrypted /boot partition. In addition I would like to know if encryption can be implemented on an ...
2
votes
0answers
111 views

Exchange 2007 and Droid Rezound SD CARD Encryption

We have an Exchange 2007 server that supports many DROIDX phones. The configurations are setup to only enforce a pin code. However on the DROID REZOUND, it forces you to encrypt the SDCARD. This ...
2
votes
0answers
126 views

Can encryption be disabled for the login handshake in SQL Server 2005 or 2008

When a client Application connects to SQL Server the login credentials are sent over the network in a TLS Encrypted Handshake Message. For testing purposes I would like to have the login credentials ...
1
vote
0answers
59 views

Remmina TLS, NLA works, but high encryption fails

Remmina works fine with TLS and NLA. But if encryption is set to high instead of client compatible, then it stops working. Questions: 1. Why setting high encryption prevents connectivity? 2. What's ...
1
vote
0answers
75 views

Debian KVM Host, Debian guests : where full-disk encryption should be done?

I have a host under Debian Wheezy, running qemu/KVM. I want to have all my guests fully-encrypted. I can see to possibilities : - Either I encrypt the LVM Volume using dm-crypt (cryptsetup) and use ...
1
vote
0answers
43 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
1
vote
0answers
38 views

Most secure way to encrypt critical data to be shared, edited and seen (must ALWAYS be secure)

This question does not rely on time... so it's not about keeping data on tape or anything similar. I have 3 distinct PCs with critical information. PCs are running Windows OS. They all hold critical ...
1
vote
0answers
507 views

How to change IIS Express Virtual Directory password encryption provider?

In Visual Studio 2012 I'm working on an ASP.NET MVC application which requires a Virtual Directory under the main application directory called "Shared". This happens to point to a UNC path, so I need ...
1
vote
0answers
156 views

udev rule for disconnection and hibernate/suspend

I have an external hard drive which contains different GPT partitions. One of them is a LVM partition. This partition is contained in a LVM volume group (called "volga"), which in turns splits into ...
1
vote
0answers
87 views

Expanding raid5 software raid

I have recently bought 4 2TB drives to expand my existing 4*2TB raid5 setup, using mdadm software raid in debian. As a initial step, I have created a raid5 on the four new drives and created an ...
1
vote
0answers
260 views

Can samba authentication be coupled to file encryption? What about WebDAV?

I'd like my NAS (Buffalo LinkStation Pro running Linux 2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux) to share an encrypted filesystem to the Windows clients as transparently as possible. ...
1
vote
0answers
640 views

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection ...
1
vote
0answers
674 views

How to encrypt a section within web.config using aspnet_regiis -pe or -pef

I am a developer trying to encrypt part of my web.config file in an ASP.NET site (first time I've tried this...). Having repeated failures with all types of syntax changes, so perhaps better to post ...
1
vote
0answers
64 views

Suggestion for encrypting database files in SQL 2008 Standard Cluster

I have an SQL 2008 Server configured as a fail-over cluster an have a requirement to have the database files (mdf/ldf) encrypted. We have tried to use EFS for this but there are a lot of issues doing ...
0
votes
0answers
17 views

Debian encrypted home directory setup fails

Here's the problem: # ecryptfs-migrate-home -u <user> INFO: Checking disk space, this may take a few moments. Please be patient. INFO: Checking for open files in /home/<user> Enter ...
0
votes
0answers
21 views

Changing default encryption for OS X IPSec Client

We have two MacBooks -- one with Yosemite (10.10.2) and one with OS X Lion. IPSec to the office works from one but not from the other and the root cause seems to be that Yosemite uses AES as the ...
0
votes
0answers
16 views

How do I edit a signed or encrypted SMIME message to include a footer?

Is there any way to edit a signed/encrypted SMIME message so that there is a legal disclaimer on the message? I'm thinking about the MIME multipart email directive may allow for this.
0
votes
0answers
32 views

Running python to unlock luks full disk encryption

I wish to make use of full disk encryption using Luks on ubuntu 14.04. However, i wish to make use of my own python script to carry out the functionality of generating the decryption key during device ...
0
votes
0answers
16 views

smb.conf - where do I set key and certificate for 'smb encrypt' transport encryption?

Reading smb.conf man page I can enforce encrypted smb transport; smb encrypt = mandatory. Where do I set the keys to use for the encrypted transport? I was expecting something like apache2: ...
0
votes
0answers
30 views

Preseeding with RAID1 Encrypted LVM

I would like to preseed a debian wheezy system with Encrypted RAID1 LVM. I've done some google searching, seen others asking the same question, but have not found any answers. I have successful ...
0
votes
0answers
52 views

Possible to decrypt FDE/SED Samsung 840 upon boot without native BIOS/UEFI support for ATA password?

It's possible to encrypt and decrypt a drive with hdparm coupled with Full Disk Encryption like some Samsung and Intel SSDs. What I'm curious about is if it's possible to use with a Desktop ...
0
votes
0answers
82 views

Encrypting SVN Store with ecryptfs

I previously had TrueCrypt setup to automount my SVN repos on the Subversion server at boot with an automated network script that used a keyfile on a protected share to mount the volume. Now that ...
0
votes
0answers
134 views

Do I have to somehow enable AES-NI on Nginx?

I've got CPU With AES-NI, I would like to use this function with nginx. ssl_engine aesni; - this parameter was used before openssl 1.0.0, but now, openssl is bundled with aesni support. And this ...
0
votes
0answers
135 views

SQL Server 2012 : recover lost symmetrical encryption key or just disable encryption

We currently face a huge problem and we hope you can help us. We have two systems (Dynamics CRM 2013) on two different servers, both use SQL Server 2012. One on our dev server the other on our live ...
0
votes
0answers
119 views

openSUSE encrypted root over RAID, given Yast doesn't support encrypted root?

This is for a fresh install of 13.1 I'll be making. Four drives in RAID10 need to be on the bottom. I'd rather the RAID be software, MD, rather than hardware, though I'd use hardware RAID if all else ...
0
votes
0answers
79 views

How to solve problematic cpu load due to encryption when using SFTP on a VM

my company is trying offer a sftp service for a big amount of customers. The serving machine will be on a VM and tests have shown that, with an increasing amount of simultaneous users, the cpu becomes ...