Questions tagged [encrypting-file-system]
The Encrypting File System (EFS) on Microsoft Windows is a feature introduced in version 3.0 of NTFS that provides filesystem-level encryption.
67
questions
0
votes
1answer
72 views
Intermitent bug on encrypted swap over Ubuntu 18
Wanting encrypt swap and the only script I found to do it as I want is it:
sudo -i
cd /root
mkdir -p ./.myfolder
cd ./.myfolder
swapsize='4G'
curdir=$(pwd)
flNmDev="...
-1
votes
1answer
91 views
Linux refusing mapped image file created with dd as swap device
Getting the error "WRITE ERROR ON SWAP DEVICE" on boot but all works fine when I change the line:
truncate -s $swapsize $flPtDev
by
cp /swap.img $flPtDev
The complete script is the following:
...
0
votes
1answer
67 views
Is possible execute crypttab config without rebooting making the encrypted device mapped and available?
I need turn a file into a encrypted device mapped on /dev/mapper/ and to do it the easier way I found is adding a named entry to /etc/crypttab pointing to image file and key file, it works fine and ...
0
votes
0answers
54 views
Encrypting the root partition of existing KVM virtual machines
We're midway through process of upgrading a set of KVM VMs along with the hypervisor. The first step was to update the OS on each and then run a regression test to verify that the system is still ...
-4
votes
1answer
24 views
directory protection in Ubuntu 14.04 Server [closed]
I want to run the following on a single ubuntu 14.04 server
- Asterisk
- PHP/Apache/ MySQL
This server will be offline at customer's location.
I want to protect these folders in a way that if my ...
0
votes
1answer
42 views
Some files created years into the future in NFS mount to AWS EFS volume
We just saw a couple files get created years into the future on an EFS volume over an NFS mount from a Linux EC2 instance.
The "Change" time is correct, but the Access and Modify are years out.
Has ...
0
votes
2answers
61 views
Is it possible to secure a VPS from its seller/provider?
I have bought a VPS hosted in the USA through an Iranian company (I live there, it's quite hard to buy one directly.), and I am wondering if it is possible to secure the system against potential ...
1
vote
1answer
35 views
Securely encrypt backup for postgres DB
I do not want to encrypt my postgres DB. However, I want encryption at OS level, such that if the files(such as backups or configurations) are moved to any other system, it should be unreadable or non ...
3
votes
1answer
117 views
Can an EFS encrypted folder be backed up in an Azure Recovery Services Vault?
When I try to back up a Windows EFS encrypted folder on a physical server to an Azure Recovery Services Vault the file size is modified upon recovery and the files cannot be opened (are unrecognizable)...
0
votes
1answer
128 views
Encrypted file system in a hosted linux system
I'm considering to use an encrypted file system (dm-crypt or gocryptfs) in a linux system hosted by Linode. Can the administrators of Linode access the mounted (i.e., decrypted) contents? I'm not sure ...
0
votes
0answers
181 views
Can't decrypt EFS encrypted files on external drive even with correct key installed
I'm having trouble decrypting EFS-encrypted files that were copied onto an external drive on another computer even though I have the correct certificate.
This is what I did:
Enabled EFS on old ...
7
votes
2answers
11k views
Backup AWS EFS to S3
I've been desperately trying to find a way to backup my AWS EFS file system to S3, but cannot seem to find one.
There's several EC2 instances running all having access to the mentioned EFS.
In order ...
0
votes
0answers
127 views
File archiver that stores RAW EFS files
I'll start off with the assurance that I have all the EFS certs safely in hand, and that is not what I'm asking about below. Assume I have that part taken care of.
I'm trying to backup a some mixed (...
-1
votes
2answers
110 views
How can I protect business data from being removed by an employee using encryption? [closed]
I am looking to beef up security on an office network. Aside from the obvious: physical security, limiting user privileges using Active Directory, running a firewall that does stateful packet ...
0
votes
2answers
510 views
Why Add button in EFS doesn't exists?
I am trying to enable EFS on a folder and add some others users to access it too. but the Add button doesn't exist on the place it should be. I want to know what is the reason for that ?
2
votes
1answer
7k views
Windows 2012 Server File Encryption
I am looking for a solution to encrypt directories/files on a Windows 2012 server.
Several Excel files will be stored in a share, and I am looking for a solution to encrypt them independently. From ...
0
votes
2answers
2k views
Preeseding a debian stable install with a complex partitioning scheme - missing physical volume
My personal systems run on:
An open /boot partition
separately random key encrypted /tmp and swap partitions and
a password encrypted btrfs lvm volume holding everything else.
My latest project is ...
1
vote
1answer
692 views
Unable to open/copy files on an encrypted UNC share after reboot of file server
I have 2 Windows 2012 environments. The first is a CMS that is accessing files on a the second server (file server).
One of the shares that I have on the file server is marked as encrypted. When ...
2
votes
1answer
861 views
Prompt for Certificate Password When Accessing EFS Shares
My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
1
vote
1answer
3k views
EFS - how to disallow encrypted files on network share?
I have two servers, both on domain, both Windows Server 2008 R2, to my eye almost identically configured.
Server1 allows to copy encrypted files to his network shares, Server2 gives error when trying ...
1
vote
1answer
210 views
Does filesystem encryption strain SSDs?
For security purposes we are required to implement full filesystem encryption on an upcoming server installation. We use the default encryption settings shipped with CentOS 7.
My question: as our ...
2
votes
1answer
995 views
Decom old CA and Basic EFS certificates
Getting very close to decommissioning our old CA. The new CA is in place and happily issuing certificates and the old CA has had all the templates removed so no certificates will be issued.
My ...
2
votes
1answer
2k views
EFS Recovery Agent not working
I know EFS data recovery has been discussed so many times in the forums but I could not find anything useful in the other threads as I believe I have followed all the required steps but still cannot ...
0
votes
0answers
177 views
Apache DocumentRoot folder encrypted with EFS
As per this question https://stackoverflow.com/questions/7575709/newly-added-files-getting-permissions-error Apache 2.2 is not supposed to be able to access its DocumentRoot if the folder has been ...
2
votes
2answers
2k views
Decrypt EFS files when copying to windows shared
My users have their documents redirected to a share on a file server running NTFS - very regular setup. EFS works and the users are able to encrypt a folder and files in their redirected documents.
...
2
votes
1answer
595 views
Current state of EFS
I need to encrypt a 3.5TB folder on 2008 R2 server.
The folder is shared and both users and applications need to access the files(pdf) in it over the network.
Since the server is a VM (ESXi 5) ...
5
votes
1answer
826 views
Windows Task Scheduler cannot access EFS encrypted folder despite running as a user with access
I have a batch file set to run via Task Scheduler in Windows Server 2008 R2. The batch file is being used to rotate and compress MySQL logs, and the folder containing these logs is encrypted using ...
2
votes
1answer
4k views
Using another user's EFS Certificate
On a domain joined computer, can you encrypt a folder using EFS and then export your certificate/private key and then login as another user and import it to view the encrypted files? I have tried ...
1
vote
0answers
244 views
Safe filesystem encryption using mdadm and cryptsetup in EC2
I need to safely store some encrypted information in EC2. For this purpose, I'd like to encrypt a filesystem on my EBS drives to ensure that third-parties won't be able to poke around in my data. ...
0
votes
1answer
41 views
How to encrypt a user and specific services on a Mac Server?
I am setting up a server in an office, and we want to encrypt the hard drive so that in the event of a physical breach, the data is secure. We initially used FileVault2, but since we need to be able ...
-2
votes
2answers
3k views
Gain access to other people's encrypted files
For a proof of concept I am building a server which will host 2 users.
Both users are local admin, and both users are domain users.
User1 will encrypt the files with EFS so he can get transparent ...
2
votes
1answer
605 views
Access denied to EFS encrypted files after PC joins domain
I'm experiencing strange behavior with Windows Encrypted File System:
I have a machine that is in workgroup mode (not joined to a domain)
I encrypt an entire directory structure on the machine (...
0
votes
1answer
369 views
Encryption strategy for CentOS on Amazon EC2
Although there is plenty of information about how to create encrypted partitions (like http://silvexis.com/2011/11/26/encrypting-your-data-on-amazon-ec2/), there's not much information suggesting what ...
1
vote
1answer
175 views
EFS encrypted Office documents lose additional users after saving the file
I create a new Word document in 'Office Open XML' format (docx). I then encrypt it using EFS and add several other users to access the file.
Now I open the document and edit it, after saving it, the ...
1
vote
1answer
750 views
How to setup Samba4 to enable NTFS encryption? [closed]
I'm currently giving the sernet.de samba4 (rc1) appliance a shot (running inside vmware player on Windows 7). Providing a share is no problem, but the client still can't choose to encrypt files. What ...
1
vote
1answer
1k views
EFS Remote Encryption
We have been trying to setup EFS across our domain.
Unfortunately Reading/Writing file over network share does not work, we get an "Access Denied" error.
Another worrying fact is that I managed to ...
1
vote
1answer
3k views
Replicating EFS encrypted files
Recently I attempted to configure Microsoft's DFSR on Windows 2008 R2 to replicate a folder which was encrypted with EFS. The setup gave no errors or warnings, but later I read that DFSR does not ...
1
vote
1answer
206 views
POP connector Exchange Server 2010
An old server with Exchange 2003 is being replaced with a new 2008 R2 server (x64) running Exchange 2010.
On that 2003 machine we had a tool called EFS (Email Forwarding System) but the tool is old ...
-2
votes
3answers
3k views
FreeBSD encryption concept: automatic boot without password or key, when mounted by another system?
Recently, i installed FreeBSD for work and geli for encryption. (Full disk encyrption without boot partition.) When I finished getting it setup, I found that every time it boots, I need to enter the ...
0
votes
1answer
620 views
How to deal with LVM encryption on remote restart?
Is there a way to handle the LVM mounting password remotely? This is usually presented during boot on the main console (where the machine physically resides at). I am able to ssh in during the ...
3
votes
2answers
1k views
Can root become user and access encrypted home?
The home is mounted unencrypted on login.
I tried accessing it after doing 'su sampleuser', but it was encrypted, which is the expected behavior I guess.
I also tried changing the user's password, ...
2
votes
1answer
674 views
add certificate to all files in EFS-folder with script
I try to set up collective access to EFS-folder. I want to add certificates of all users to all files in folder. Is it posible do with using powershell scripts or some another way?
Thanks.
-4
votes
3answers
227 views
Can user protect his files from untrusted administrator? [closed]
I am looking for means to prevent my Windows administrator from accessing my files.
My plan is to cipher my files with EFS. As far as I know administrator can access ciphered files if he has EFS ...
0
votes
1answer
1k views
Sharing EFS encrypted
I have standalone, nodomain server. EFS is used on this server for one folder. How to share the encrypted folder? Users on the server are created locally. I tried to export the owner folder ...
0
votes
1answer
1k views
Group Policy Recovery Agent EFS not being used
I am trying to get EFS working on our workstations. First when I tried to set a directory to be encrypted I got a warning about the Recovery Agent certificate being invalid.
It turned out that the ...
0
votes
1answer
315 views
EFS encrypted files cannot be opened, even with the right key
I created a folder on my Win7 Pro machine, set it to encrypt contents to protect data. Then I opened MMC, added the Certificates snap-in for "my user account", expanded Certificates - Currrent User > ...
1
vote
1answer
87 views
Ensuring no EFS files remain on a Windows XP SP3 system
Lets say I have a user in my organization who has forgotten his/her Windows logon password to their office computer. As an IT manager, I can log in via the Administrator and reset that user's password....
3
votes
2answers
2k views
Disabling EFS--what to do if there are any encrypted files?
I am in the process of retiring an old Windows-integrated CA and bringing online a new, properly-configured one (several, actually). Most of our systems are unable to use EFS thanks to Group Policy... ...
2
votes
0answers
333 views
EFS over network
Two Windows 7 computers, NON-AD environment. An identical username/password exists on both machines.
If I use EFS to encrypt files on computer 1, then install the EFS certificate on computer 2, ...
3
votes
2answers
2k views
How to mount LUKS partition securely on server
I'm curious if it is possible to mount a partition encrypted by cryptsetup with LUKS securely and automatically on Ubuntu 10.0.4 LTS.
For example, if I use the key for the encrypted partition, than ...
