Encryption is transforming information through a cipher to protect it from unauthorized access.

learn more… | top users | synonyms

4
votes
1answer
3k views

Outlook 2010 cannot reply to encrypted email

A coworker and I occasionally use encrypted email to send passwords. We both are using Outlook 2010, and both of our Digital IDs were created by the same authority. For my coworker, creating, replying,...
3
votes
1answer
498 views

Bitlocker device name change

When imaging our PCs we generally create a temp name for our facilities to change the device name to whatever particular department fits their needs. The issue is we can't send out any devices without ...
2
votes
1answer
318 views

how do I plan partitions for LUKS encryption of a CentOS 7 server?

A CentOS 7 web server needs encryption at rest. I would like to use LUKS encryption for this, but I need direction to plan how. Can I use LUKS encryption to encrypt the entire drive as one unit on a ...
3
votes
0answers
70 views

Anubis as GPG proxy

I'm trying to setup GNU Anubis to act as a sort of proxy to sign/encrypt emails coming from a service. The service is currently configured to send email using our SMTP server. The idea would be to ...
2
votes
0answers
100 views

How can I connect *with* RC4 ciphers using a browser on an HTTPS connection

I would like to use a web browser to surf some sites while using the RC4 ciphers so I can verify if logging said connections is working on some load balancers. Is there some way for me to enable and ...
2
votes
0answers
111 views

Exchange 2007 and Droid Rezound SD CARD Encryption

We have an Exchange 2007 server that supports many DROIDX phones. The configurations are setup to only enforce a pin code. However on the DROID REZOUND, it forces you to encrypt the SDCARD. This ...
2
votes
0answers
133 views

Can encryption be disabled for the login handshake in SQL Server 2005 or 2008

When a client Application connects to SQL Server the login credentials are sent over the network in a TLS Encrypted Handshake Message. For testing purposes I would like to have the login credentials ...
1
vote
0answers
14 views

Can't read old UFS1 superblock using GELI (Blowfish-CBC) on FreeBSD

Trying to add encrypted partition on FreeBSD10.3 GELI/Blowfish-CBC. AES on / and /swap works fine, but I can't add an additional encrypted partition using Blowfish. Here is the way I did it: # mount -...
1
vote
0answers
11 views

What is the correct way to secure a user directory with EFS not in a domain network?

Logged in as an administrator on a Windows 10 machine. cipher /E /A /S:C:\Users\MYUSER or cipher /E C:\Users\MYUSER I've read and been told that the bottom one is the correct way. End result: ...
1
vote
0answers
66 views

Use postfix through a proxy. How should it be configured?

Postfix by default uses ports 25, 465 and 587. In my configuration, I enabled TLS encryption using the option smtpd_use_tls=yes in postfix's main.cf. This makes all smtp communications encrypted as ...
1
vote
0answers
37 views

OpenVPN with CryptoAPI on Linux

I have an OpenVPN config file that uses Microsoft CryptoAPI. Meaning, it contains these lines: cryptoapicert "SUBJ:..." ca ca_file.crt tls-auth tls.key It works fine on a Windows system. However, ...
1
vote
0answers
12 views

Fetchmail and Procmail set up with TLS

I'll start by saying I'm pretty uninformed when it comes to mail protocols, encryption, and basically everything else relevant to this question. My goal is to set up fetchmail/procmail on a machine ...
1
vote
0answers
71 views

Bitlocker data drive opens as read only -

I have a virtualized Windows Server 2012R2 running on ESXi 6.0 There are 2 virtual disks in this system, an unencrypted C drive for the OS and a Bitlocker encrypted D drive for data sharing. Bitlocker ...
1
vote
0answers
17 views

VPN connection drops when using encryption

I have set up VPN server on Windows Server 2012 If I use encryption to connect to the VPN server the connection would drop after 20min, If I dont use encryption the coonection stays fine. The client ...
1
vote
0answers
148 views

MySQL encryption at rest

Context: Rackspace CloudServers. The options I can find are rather slim. Amazon will encrypt the whole disk (meh), Gazzang could encrypt a virtual partition with just the DB files on it (if the ...
1
vote
0answers
21 views

Web encryption on uncontrolled LAN

I have a situation in which I wish to produce (physical hardware) widgets that plug into a LAN and act as a web server, serving content to web clients that are also on the LAN. The traffic from the ...
1
vote
0answers
68 views

Encrypt credentials JNDI authenticating to JBoss 7.1.1.Final

In my JNDI Lookup, connecting to JBoss 7.1.1.Final from remote clients with plain text password is working fine. Now, I am trying to encrypt credentials in the form, but it's not working. #==========...
1
vote
0answers
311 views

Password mismatch in dovecot with postafixadmin

After many hours trying to set up a new mail server, I just can't figure out why the passwords which postfixadmin store are a mismatch with what dovecot passes for authentication. In postfixadmin, ...
1
vote
0answers
227 views

Remmina TLS, NLA works, but high encryption fails

Remmina works fine with TLS and NLA. But if encryption is set to high instead of client compatible, then it stops working. Questions: 1. Why setting high encryption prevents connectivity? 2. What's ...
1
vote
0answers
175 views

Debian KVM Host, Debian guests : where full-disk encryption should be done?

I have a host under Debian Wheezy, running qemu/KVM. I want to have all my guests fully-encrypted. I can see to possibilities : - Either I encrypt the LVM Volume using dm-crypt (cryptsetup) and use ...
1
vote
0answers
91 views

How can one determine what Kerberos key encryption algorithms are supported on a Cisco IOS device?

When attempting to load an SRVTAB over TFTP, I receive an "Unsupported keytype" error: abc(config)#kerberos srvtab remote 1.2.3.4 abc.srvtab Loading abc.srvtab from 1.2.3.4 (via Vlan123): ! [OK - 121 ...
1
vote
0answers
62 views

Most secure way to encrypt critical data to be shared, edited and seen (must ALWAYS be secure)

This question does not rely on time... so it's not about keeping data on tape or anything similar. I have 3 distinct PCs with critical information. PCs are running Windows OS. They all hold critical ...
1
vote
0answers
978 views

How to change IIS Express Virtual Directory password encryption provider?

In Visual Studio 2012 I'm working on an ASP.NET MVC application which requires a Virtual Directory under the main application directory called "Shared". This happens to point to a UNC path, so I need ...
1
vote
0answers
231 views

udev rule for disconnection and hibernate/suspend

I have an external hard drive which contains different GPT partitions. One of them is a LVM partition. This partition is contained in a LVM volume group (called "volga"), which in turns splits into ...
1
vote
0answers
94 views

Expanding raid5 software raid

I have recently bought 4 2TB drives to expand my existing 4*2TB raid5 setup, using mdadm software raid in debian. As a initial step, I have created a raid5 on the four new drives and created an ...
1
vote
0answers
275 views

Can samba authentication be coupled to file encryption? What about WebDAV?

I'd like my NAS (Buffalo LinkStation Pro running Linux 2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux) to share an encrypted filesystem to the Windows clients as transparently as possible. ...
1
vote
0answers
744 views

MAC OS X VPN client / Certificates / Cisco ASA series

I spent a lot of time surfing the web for the solution, but alas, so I finally concluded that this might be an interesting topic to discover. Here's the task: 1. I need to establish VPN connection ...
1
vote
0answers
823 views

How to encrypt a section within web.config using aspnet_regiis -pe or -pef

I am a developer trying to encrypt part of my web.config file in an ASP.NET site (first time I've tried this...). Having repeated failures with all types of syntax changes, so perhaps better to post ...
1
vote
0answers
111 views

Client certificate based encryption

I have a question about security of a file on a webserver. I have a file on my webserver which is used by my webapplication. It's a bitcoin wallet. Essentially it's a file with a private key in it ...
1
vote
0answers
65 views

Suggestion for encrypting database files in SQL 2008 Standard Cluster

I have an SQL 2008 Server configured as a fail-over cluster an have a requirement to have the database files (mdf/ldf) encrypted. We have tried to use EFS for this but there are a lot of issues doing ...
0
votes
0answers
12 views

Ipsec with public encryption domain?

my partner require a public encryption domain for an ipsec tunnel. With this configuration: IP address: A.B.C.7/32 Encryption domain: A.B.C.128/25 My question is: if all my traffic is tunneled ...
0
votes
0answers
49 views

ldaps on Debian Jessie with let's encrypt certificate

I'm already struggling for a while to set up an LDAP-Server on debian Jessie with enabled TLS. I'm new to the topic, so please show me my mistakes. I started by installing an reconfiguring slapd apt-...
0
votes
0answers
13 views

Archiving files to an encrypted destination

I am setting up a new SPLUNK installation (fairly small scale, Windows), and it has been requested that I "encrypt the data". Further questioning got my requirement to be that: 30 - 60 days ...
0
votes
0answers
39 views

HAproxy ssl re-encryption and http header modification

I want to use my Haproxy 1.6.5 as Https load balancer before my https servers but I stuck with a problem of misunderstanding . I want this behaviour: haproxy is available as https://example.com but ...
0
votes
0answers
23 views

DELLs iDRAC integrated VNC Server not working with encryption enabled

since I allready posted on two GitHub Communitys about this issue, I will try to keep this as short as possible. The GitHub Postings are added for reference at the end of the post. Im trying to ...
0
votes
0answers
17 views

OwnCloud user: enable password recovery by default

I have an ownCloud server with server side encryption enabled. My test showed that creating a new user disables the password recovery. Is there a way to enable password recovery by default? If not, ...
0
votes
0answers
10 views

EFS and Always Encrypting new files

I have an issue where files are not always being encrypted. I did a right click and set to encrypt all and subfiles and when files were dropped they kept being encrypted. As of right now, new files ...
0
votes
0answers
29 views

Does CloudFront support S3 signature version 4 for KMS encrypted objects?

I'm using Cloudfront with an S3 origin that is using KMS to encrypt objects. I'm getting the following error when sending a GET request for an object in the S3 bucket. Requests specifying Server ...
0
votes
0answers
12 views

Secure an external linux distro

I have a fairly complex situation, I have researched all the parts required before asking this question. I am trying to make a bootable linux distro on which I have an app that is located on an ...
0
votes
0answers
34 views

Rsync backup to veracrypt-encrypted USB memory stick results in errors

I have created encrypted USB memory stick using Veracrypt for backup. First sync went ok, now trying to update it results in error. I'm using this command after mounting the volume: sudo rsync -...
0
votes
0answers
90 views

How to decrypt owncloud backups manually without a working installation?

I recently had a data lack and miss some very important files. Encrypted backups I had an owncloud 8.x instance running on my server last year for keeping backups and already located the wanted ...
0
votes
0answers
40 views

IIS to SQL Server IPSec configuration

I'm trying to configure 2 servers on a VPC on Amazon AWS to use IPSec. One server has Win2008 R2 with SQL Server 2008 and the other one is a Win 2012 R2 with IIS. I want to secure the connection ...
0
votes
0answers
67 views

I'm having trouble installing perl module Crypt::OpenSSL::AES

I'm having trouble installing a perl module onto my server called Crypt::OpenSSL::AES I'm using cpan to try to install it but it keeps coming back with an error: Checking if your kit is complete......
0
votes
0answers
322 views

Openshift: SSH key denied, even though they match

I am attempting to use the OpenShift RHC tool on a Windows machine to ssh into one of my applications. The public key associated with my OpenShift account matches my .\.ssh\id_rsa.pub and I've even ...
0
votes
0answers
28 views

EFS can decrypt a file but not re-encrypt after modification

I have a Windows 2008 R2 server with a shared folder containing an encrypted subfolder (EFS) for each user with important files. For security reasons 2 additional DRA's have been configured on the ...
0
votes
0answers
46 views

Can't setup mount of EncFS on user login

I've tried to setup EncFS to be mounted on user login as described in this guide excluding the Password Utility section, however it works with little success. The EncFS works properly (encryption/...
0
votes
0answers
26 views

Encrypted network share for multiple users

I have the following scenario: 100GB of data 5 users should be mounted on two different servers the servers are all running Ubuntu users are accessing/writing to it at the same time (not the same ...
0
votes
0answers
32 views

Does my SSL cert have anything to do with or say about the symmetric session key?

The answer found on this server fault thread is my jumping off point for this general topic: http://serverfault.com/a/313558 ... and this question can be thought of as a follow-up to that answer. ...
0
votes
0answers
213 views

Encrypting SVN Store with ecryptfs

I previously had TrueCrypt setup to automount my SVN repos on the Subversion server at boot with an automated network script that used a keyfile on a protected share to mount the volume. Now that ...
0
votes
0answers
160 views

How to solve problematic cpu load due to encryption when using SFTP on a VM

my company is trying offer a sftp service for a big amount of customers. The serving machine will be on a VM and tests have shown that, with an increasing amount of simultaneous users, the cpu becomes ...