Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [disk-encryption]

The tag has no usage guidance.

0
votes
0answers
4 views

How to create randomly keyed swap with Kickstart

I want to create an encrypted swap partition using Kickstart. Instructions on how to create encrypted swap manually are in the related question How to create a randomly keyed, encrypted swap ...
0
votes
0answers
17 views

How are Lightsail Block Storage Devices encrypted? [on hold]

I recently started using Amazon Lightsail to host a small web application. As I figured the system disk is not encrypted by default, I am now considering storing sensitive information (currently a ...
0
votes
1answer
23 views

linux: truecrypt/veracrypt/luks/etc without /dev/loop*

I'm using a linux system without any /dev/loop* devices and without the loop module compiled into the kernel, and I don't have the option of upgrading the system or kernel. I want to use luks, ...
0
votes
0answers
41 views

WMI Query Full Disk Encryption

Microsoft provides the "Win32_EncryptableVolume" WMI class to query the encryption status of a disk, but its only meant for BitLocker. Does anything exist to query the disk encrypted status if the ...
0
votes
1answer
44 views

Does BitLocker encrypt in-place?

I can't find explicit documentation on this anywhere: Is BitLocker doing an in-place encryption? As to, I can actually encrypt my whole running system, with the Windows partition itself, without ...
0
votes
2answers
80 views

How can I analyze an encrypted HDD?

I have a HDD which I encrypted few years ago but I can't remember the tool I used. How can I find out if I have used TrueCrypt or VeraCrypt to encrypt my hard drive? Thanks.
1
vote
1answer
27 views

Securely encrypt backup for postgres DB

I do not want to encrypt my postgres DB. However, I want encryption at OS level, such that if the files(such as backups or configurations) are moved to any other system, it should be unreadable or non ...
0
votes
0answers
41 views

USB authentication and Encryption on Windows Environment

My boss ask me that he want to secure USB thumb drive usage on our company. He want the USB thumb drive data un-encrypted when some one authenticate to our Active Directory (AD) server whether locally ...
0
votes
0answers
41 views

FreeIPA or similar with encrypted home for ubuntu?

I am new to sys-admin work. My objective is to setup a couple of computers with Ubuntu 16.04 which satisfy two objectives: home folders encrypted central authentication management Currently I am ...
2
votes
0answers
176 views

Linux dm-crypt slowness with fast SSD

I'm experiencing slowness with an encrypted filesystem. Here are the details: # /dev/sdd: TOSHIBA PX05SVQ192B AX02 /dev/sdd # gdisk -l /dev/sdd GPT fdisk (gdisk) version 0.7.1 Partition ...
0
votes
0answers
48 views

Creating a VPS snapshot of a disk-encrypted system

I'm renting a VPS root server and just wanted to create a snapshot of it in the VPS control panel, but I can't because allegedly I am using all of my storage (320GB). I'm actually only using about ...
2
votes
0answers
200 views

FreeBSD: How to extend an encrypted ZFS zroot pool

I installed a vanilla FreeBSD 11.0 (amd64) and chose the installation option "ZFS on / (encrypted)" (or however it is really called). Now I have a nice ZFS pool: root@storage:~ # zpool list NAME ...
0
votes
1answer
548 views

Does disk encryption on a hyper-v partition work and is it effective and stable?

I have a new health care IT customer requirement. They're file server is a virtual 2012 R2 running on a Dell PE with 2012 R2 Hyper-V. The Dell PE with 2012 R2 Hyper-V server has two partitions. 1st ...
1
vote
0answers
566 views

cryptsetup cannot close mapped device

When I run: LANG=C cryptsetup --debug luksClose /dev/mapper/Pool-A it fails as follows: device-mapper: remove ioctl on Pool-A failed: Device or resource busy Device /dev/mapper/Pool-A is still ...
0
votes
1answer
164 views

Azure Site Recovery support and/or alternatives for VMs with encrypted drives

Azure Recovery docs indicate that encrypted drives are not supported,we currently utilize another hosting solution that uses vormetric to encrypt our data drives, is there any supported path that ...
0
votes
1answer
537 views

How to encrypt a Windows Server hard-drive remotely?

I have a couple of dedicated servers running Windows 2012 on the other side of the country. My only access to these servers are through RDP. For compliance reasons, I will need to encrypt their hard-...
0
votes
1answer
348 views

Encrypting volumes of a mongo/elasticsearch cluster

I have mongodb and elasticsearch cluster. I want to encrypt the volumes associated with all the instances running in the cluster. If I encrypt only one volume among the cluster than the cluster will ...
2
votes
1answer
2k views

Encrypting mapped network drives in Windows

I have Win Server 2012 and the drives of one of the HDDs connected to it are mapped as network drives in a Windows 10 client. If I encrypt those drives using bitlocker with the user account on the ...
2
votes
1answer
220 views

how do I view current tpm owner in windows?

How do I see if a TPM owner has already been set? All see are examples of how to clear the TPM, reset owner password, change owner. I just want to see if the owner is set and possibly who it is set to....
2
votes
0answers
114 views

How to encrypt data on an Ubuntu server built on RAID + LVM?

I'm managing a file server with two disks. The server is running Ubuntu 14.04, and it's already configured with software RAID1 (/dev/md0), and LVM on top of it. Important data is stored in /var and /...
1
vote
0answers
45 views

Group policy setting to prevent asking user which encryption mode to use

Asked a similar question previously: Group policy setting to prevent asking user where to store recovery key I'm trying to enforce the encryption mode to the new XTS-AES so that if the users ...
0
votes
1answer
55 views

Bitlocker decryption trouble

today I started the procedure to access a bitlocker encypted data storage hard disk. At first I unlocked it and then I turned off bitlocker. The turning off took some time, but it ended without any ...
1
vote
1answer
283 views

Encrypted root partition not booting properly

I have a Debian 8 VPS with an encrypted root partition. After a kernel update a few months ago (package version 3.2.73-2+deb7u3), it stopped being able to decrypt properly on boot. As far as I can ...
0
votes
1answer
80 views

Firmware RAID5 and SED on Linux

I have three HDD's (Seagate ST4000NM0053) in a RAID5 set-up using firmware RAID (RSTe 4.0, Intel® C612 chipset) on Debian 8.4. They are SED, so I would like to set the ATA password. Unfortunately, my ...
0
votes
1answer
87 views

Shrink non-bootable LUKS LVM

I'm importing a VMWare OVA whose second disk uses LUKS and configured to use 1TB of space, although its VMDK is only 30GB. I want to shrink this down. I am following the instructions here (https://...
4
votes
1answer
2k views

Cryptsetup luks - Check that kernel supports aes-xts-plain64 cipher

I encrypted a bunch of hard drives with cryptsetup luks encryption on CentOS 5. Everything was fine, until I upgraded my system to CentOS 6. Now I cannot mount the disks anymore. To mount with my ...
5
votes
1answer
128 views

Can servers with encrypted root filesystems be made reasonably highly available?

I have some servers I'd like to keep on encrypted disks, but I don't want to have to manually type a passphrase at every boot. I also don't want to keep the key on the machine unencrypted. TPM would ...
7
votes
2answers
283 views

LUKS Error During Boot

alg: drbg: could not allocate DRNG handle for ... I only see this error on the console during the boot process of virtual machines we create. EDIT: 2/5/16 - I see it on some bare-metal installations, ...
3
votes
2answers
1k views

eCryptfs headers errors

I'm getting the following error on a server where a partition is encrypted thru ecryptfs. [3440851.003561] Valid eCryptfs headers not found in file header region or xattr region, inode 22545087 [...
3
votes
1answer
118 views

How secure is information on a LUKS encrypted backup media?

Imagine confidential information (certificates, keys, whatever) stored on an LUKS encrypted backup disk containing for example an ext4 file-system. AFAIK such a device contains a key file which is in ...
0
votes
2answers
2k views

cryptsetup luksOpen key-file does not work

I am getting "No key available with this passphrase." when trying: sudo cryptsetup open --type luks /dev/sdc storage --key-file=/path/to/keyfile The /path/to/keyfile file contains just the ...
0
votes
1answer
528 views

Remove McAfee branding from Windows login

McAfee Enterprise plasters its brand over everything on the PC. Everything. The latest is that since installing disk encryption, the McAfee logo is placed over the user account picture on the ...
-1
votes
2answers
99 views

How can I protect business data from being removed by an employee using encryption? [closed]

I am looking to beef up security on an office network. Aside from the obvious: physical security, limiting user privileges using Active Directory, running a firewall that does stateful packet ...
-2
votes
1answer
395 views

how do I LUKS encrypt a drive that already has data?

On a CentOS 7 server, I would like to LUKS encrypt the entire hard drive, including a 50GB partition that has already received yum install and a few other updates, but nothing else. But this tutorial ...
0
votes
1answer
124 views

Encrypted Ubuntu 14.04 File / LAMP Server

I have a question regarding the safest method to encrypt a file and/or a LAMP server using Ubuntu 14.04. When manually partitioning the disk, I chose the following: /boot - 256 MB / - 51.4 GB (...
4
votes
3answers
861 views

Can cryptsetup read mappings from /etc/crypttab?

I have a virtualized CentOS 7 server that needs to mount multiple password-protected encrypted volumes. I cannot automatically map the devices on boot, because I don't have access to the console ...
2
votes
1answer
323 views

Replacing a Self encrypting Hard Drive in an IBM xseries server raid

I have a failed drive in a RAID 5 array in an IBM x3650, Machine Type 7945. The RAID is composed entirely of original IBM SED SAS drives, 300GB ea. Unfortunately I am the purchasing Tech, not the ...
0
votes
1answer
454 views

Is mounting /boot in /etc/fstab automatically necessary?

Hello members of StackExchange, I am running a Debian 8.0 server with Full-Disk-Encryption and while I was doing some hardening I went through the /etc/fstab and I was wondering if some partitions ...
6
votes
1answer
4k views

How to send “ATA Secure Erase” command to SSD?

A very good way to erase a SSD which have SED support is to change the password/key. But what to do with those that doesn't have SED support? This article says Fortunately it is possible to erase ...
0
votes
1answer
308 views

Unable to perform enable-bitlocker and lock-bitlocker successively

I am trying to enable bitlocker on windows server 2012 R2 data volume using following command: Enable-BitLocker -MountPoint $volume -Password ($password | ConvertTo-SecureString -AsPlainText -Force) -...
2
votes
1answer
3k views

How can I input password to manage-bde -pw option via windows powershell

I am trying to encrypt Data volume (for example E:) with the following command: manage-bde -protectors -add E: -pw When I execute the above command, it will ask for the password, so I entered it. It ...
0
votes
1answer
71 views

What are the Security Implications of not fully overwriting a fresh LUKS disk prior to use

I recently read this nice Howto tutorial about doing backups with whole disk encryption using LUKS. Surprisingly for me this tutorial contains as the first part of step #3 a command to overwrite the ...
0
votes
0answers
33 views

Encrypt ubuntu 14.04 home directory with services accessing them without login

I have few services which gets started as soon as server boots up. Now i would like to encrypt my home directory. Will services work properly if i do so? Code for those services is present in the home ...
1
vote
2answers
755 views

LUKS/dm-crypt security in the case of a break-in

This is an encryption topic I've been confused by for a while now. From what I understand of LUKS, once the LUKS volume is opened with a passphrase and the resulting device mapper device is mounted, ...
1
vote
1answer
316 views

BitLocker Already Configured Issue

System Configuration: Windows Server 2008 R2 Standard Disk Configuration: RAID1 We have a newly built system that is joined to a domain and has the proper GPOs for BitLocker already setup. We ...
0
votes
2answers
1k views

Preeseding a debian stable install with a complex partitioning scheme - missing physical volume

My personal systems run on: An open /boot partition separately random key encrypted /tmp and swap partitions and a password encrypted btrfs lvm volume holding everything else. My latest project is ...
0
votes
3answers
580 views

Automation and full-disk encryption

I know that the title seems to be completely contradictory, but allow me to elaborate. Reading Bruce Schneier's recent article on data deletion got me thinking that every server should have full-disk ...
1
vote
1answer
345 views

Possible to decrypt FDE/SED Samsung 840 upon boot without native BIOS/UEFI support for ATA password?

It's possible to encrypt and decrypt a drive with hdparm coupled with Full Disk Encryption like some Samsung and Intel SSDs. What I'm curious about is if it's possible to use with a Desktop ...
0
votes
0answers
331 views

Encrypting SVN Store with ecryptfs

I previously had TrueCrypt setup to automount my SVN repos on the Subversion server at boot with an automated network script that used a keyfile on a protected share to mount the volume. Now that ...
1
vote
1answer
205 views

Does filesystem encryption strain SSDs?

For security purposes we are required to implement full filesystem encryption on an upcoming server installation. We use the default encryption settings shipped with CentOS 7. My question: as our ...