Questions tagged [encrypting-file-system]
The Encrypting File System (EFS) on Microsoft Windows is a feature introduced in version 3.0 of NTFS that provides filesystem-level encryption.
71
questions
3
votes
1
answer
294
views
Heavy NFS metadata traffic flooding NFSv4.1 Server (AWS EFS)
We are observing a massive uptick in metadata requests to an NFSv4.1 (AWS EFS) network drive that is linked to a one or more web servers. This started happening about a week ago across a number of ...
- 71
0
votes
0
answers
27
views
Does ecryptfs support AES-256? How can I check?
I have been asked if our workstations are encrypted with AES-256. I have not been able to find this information at ecryptfs.org. Various web searches report conflicting information.
Is there a way to ...
- 358
0
votes
0
answers
96
views
How to require a password/key/secret supplied by human sysadmin (via an ssh login) for every mount of a LUKS-based volume?
Summary
We want to support this scenario: if we sense any security threat that might expose our core data (all stored on a /home NFS mount from our NFS server), we immediately "hard" power off the ...
- 227
4
votes
2
answers
1k
views
Encrypt at rest existing AWS EFS instances - is it possible?
Based on my understanding of AWS documentation it appears that the only way to encrypt at rest existing EFS instances with some data is to create new EFS instances with encryption enabled and copy the ...
- 195
2
votes
1
answer
2k
views
It it possible to implement per-user quotas on Amazon EFS?
I'm would like to have a filesystem for network-mounted home directories that can scale easily (per user) at a low cost. EFS seems well-suited to this (especially with Infrequent Access enabled). ...
- 280
0
votes
1
answer
392
views
Intermitent bug on encrypted swap over Ubuntu 18
Wanting encrypt swap and the only script I found to do it as I want is it:
sudo -i
cd /root
mkdir -p ./.myfolder
cd ./.myfolder
swapsize='4G'
curdir=$(pwd)
flNmDev="...
- 1
-1
votes
1
answer
131
views
Linux refusing mapped image file created with dd as swap device
Getting the error "WRITE ERROR ON SWAP DEVICE" on boot but all works fine when I change the line:
truncate -s $swapsize $flPtDev
by
cp /swap.img $flPtDev
The complete script is the following:
...
- 81
2
votes
1
answer
1k
views
Is possible execute crypttab config without rebooting making the encrypted device mapped and available?
I need turn a file into a encrypted device mapped on /dev/mapper/ and to do it the easier way I found is adding a named entry to /etc/crypttab pointing to image file and key file, it works fine and ...
- 81
-4
votes
1
answer
32
views
directory protection in Ubuntu 14.04 Server [closed]
I want to run the following on a single ubuntu 14.04 server
- Asterisk
- PHP/Apache/ MySQL
This server will be offline at customer's location.
I want to protect these folders in a way that if my ...
0
votes
1
answer
149
views
Some files created years into the future in NFS mount to AWS EFS volume
We just saw a couple files get created years into the future on an EFS volume over an NFS mount from a Linux EC2 instance.
The "Change" time is correct, but the Access and Modify are years out.
Has ...
2
votes
2
answers
450
views
Is it possible to secure a VPS from its seller/provider?
I have bought a VPS hosted in the USA through an Iranian company (I live there, it's quite hard to buy one directly.), and I am wondering if it is possible to secure the system against potential ...
- 141
1
vote
1
answer
250
views
Securely encrypt backup for postgres DB
I do not want to encrypt my postgres DB. However, I want encryption at OS level, such that if the files(such as backups or configurations) are moved to any other system, it should be unreadable or non ...
- 11
3
votes
1
answer
181
views
Can an EFS encrypted folder be backed up in an Azure Recovery Services Vault?
When I try to back up a Windows EFS encrypted folder on a physical server to an Azure Recovery Services Vault the file size is modified upon recovery and the files cannot be opened (are unrecognizable)...
- 141
0
votes
1
answer
159
views
Encrypted file system in a hosted linux system
I'm considering to use an encrypted file system (dm-crypt or gocryptfs) in a linux system hosted by Linode. Can the administrators of Linode access the mounted (i.e., decrypted) contents? I'm not sure ...
- 1
0
votes
0
answers
301
views
Can't decrypt EFS encrypted files on external drive even with correct key installed
I'm having trouble decrypting EFS-encrypted files that were copied onto an external drive on another computer even though I have the correct certificate.
This is what I did:
Enabled EFS on old ...
- 109
7
votes
3
answers
14k
views
Backup AWS EFS to S3
I've been desperately trying to find a way to backup my AWS EFS file system to S3, but cannot seem to find one.
There's several EC2 instances running all having access to the mentioned EFS.
In order ...
- 71
0
votes
0
answers
221
views
File archiver that stores RAW EFS files
I'll start off with the assurance that I have all the EFS certs safely in hand, and that is not what I'm asking about below. Assume I have that part taken care of.
I'm trying to backup a some mixed (...
- 226
-1
votes
2
answers
231
views
How can I protect business data from being removed by an employee using encryption? [closed]
I am looking to beef up security on an office network. Aside from the obvious: physical security, limiting user privileges using Active Directory, running a firewall that does stateful packet ...
0
votes
2
answers
1k
views
Why Add button in EFS doesn't exists?
I am trying to enable EFS on a folder and add some others users to access it too. but the Add button doesn't exist on the place it should be. I want to know what is the reason for that ?
- 265
2
votes
1
answer
7k
views
Windows 2012 Server File Encryption
I am looking for a solution to encrypt directories/files on a Windows 2012 server.
Several Excel files will be stored in a share, and I am looking for a solution to encrypt them independently. From ...
- 95
0
votes
2
answers
3k
views
Preeseding a debian stable install with a complex partitioning scheme - missing physical volume
My personal systems run on:
An open /boot partition
separately random key encrypted /tmp and swap partitions and
a password encrypted btrfs lvm volume holding everything else.
My latest project is ...
- 123
1
vote
1
answer
746
views
Unable to open/copy files on an encrypted UNC share after reboot of file server
I have 2 Windows 2012 environments. The first is a CMS that is accessing files on a the second server (file server).
One of the shares that I have on the file server is marked as encrypted. When ...
- 11
2
votes
1
answer
972
views
Prompt for Certificate Password When Accessing EFS Shares
My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
2
votes
1
answer
4k
views
EFS - how to disallow encrypted files on network share?
I have two servers, both on domain, both Windows Server 2008 R2, to my eye almost identically configured.
Server1 allows to copy encrypted files to his network shares, Server2 gives error when trying ...
- 131
1
vote
1
answer
225
views
Does filesystem encryption strain SSDs?
For security purposes we are required to implement full filesystem encryption on an upcoming server installation. We use the default encryption settings shipped with CentOS 7.
My question: as our ...
- 123
2
votes
1
answer
2k
views
Decom old CA and Basic EFS certificates
Getting very close to decommissioning our old CA. The new CA is in place and happily issuing certificates and the old CA has had all the templates removed so no certificates will be issued.
My ...
user35213
2
votes
1
answer
2k
views
EFS Recovery Agent not working
I know EFS data recovery has been discussed so many times in the forums but I could not find anything useful in the other threads as I believe I have followed all the required steps but still cannot ...
- 21
0
votes
0
answers
202
views
Apache DocumentRoot folder encrypted with EFS
As per this question https://stackoverflow.com/questions/7575709/newly-added-files-getting-permissions-error Apache 2.2 is not supposed to be able to access its DocumentRoot if the folder has been ...
- 109
2
votes
2
answers
2k
views
Decrypt EFS files when copying to windows shared
My users have their documents redirected to a share on a file server running NTFS - very regular setup. EFS works and the users are able to encrypt a folder and files in their redirected documents.
...
- 6,503
2
votes
1
answer
715
views
Current state of EFS
I need to encrypt a 3.5TB folder on 2008 R2 server.
The folder is shared and both users and applications need to access the files(pdf) in it over the network.
Since the server is a VM (ESXi 5) ...
- 21
5
votes
1
answer
1k
views
Windows Task Scheduler cannot access EFS encrypted folder despite running as a user with access
I have a batch file set to run via Task Scheduler in Windows Server 2008 R2. The batch file is being used to rotate and compress MySQL logs, and the folder containing these logs is encrypted using ...
- 173
2
votes
1
answer
5k
views
Using another user's EFS Certificate
On a domain joined computer, can you encrypt a folder using EFS and then export your certificate/private key and then login as another user and import it to view the encrypted files? I have tried ...
- 1,530
1
vote
0
answers
283
views
Safe filesystem encryption using mdadm and cryptsetup in EC2
I need to safely store some encrypted information in EC2. For this purpose, I'd like to encrypt a filesystem on my EBS drives to ensure that third-parties won't be able to poke around in my data. ...
- 1,678
0
votes
1
answer
50
views
How to encrypt a user and specific services on a Mac Server?
I am setting up a server in an office, and we want to encrypt the hard drive so that in the event of a physical breach, the data is secure. We initially used FileVault2, but since we need to be able ...
- 3
-2
votes
2
answers
4k
views
Gain access to other people's encrypted files
For a proof of concept I am building a server which will host 2 users.
Both users are local admin, and both users are domain users.
User1 will encrypt the files with EFS so he can get transparent ...
- 306
3
votes
1
answer
718
views
Access denied to EFS encrypted files after PC joins domain
I'm experiencing strange behavior with Windows Encrypted File System:
I have a machine that is in workgroup mode (not joined to a domain)
I encrypt an entire directory structure on the machine (...
0
votes
1
answer
389
views
Encryption strategy for CentOS on Amazon EC2
Although there is plenty of information about how to create encrypted partitions (like http://silvexis.com/2011/11/26/encrypting-your-data-on-amazon-ec2/), there's not much information suggesting what ...
- 11
1
vote
1
answer
210
views
EFS encrypted Office documents lose additional users after saving the file
I create a new Word document in 'Office Open XML' format (docx). I then encrypt it using EFS and add several other users to access the file.
Now I open the document and edit it, after saving it, the ...
- 14k
1
vote
1
answer
792
views
How to setup Samba4 to enable NTFS encryption? [closed]
I'm currently giving the sernet.de samba4 (rc1) appliance a shot (running inside vmware player on Windows 7). Providing a share is no problem, but the client still can't choose to encrypt files. What ...
- 388
2
votes
1
answer
1k
views
EFS Remote Encryption
We have been trying to setup EFS across our domain.
Unfortunately Reading/Writing file over network share does not work, we get an "Access Denied" error.
Another worrying fact is that I managed to ...
- 31
2
votes
1
answer
4k
views
Replicating EFS encrypted files
Recently I attempted to configure Microsoft's DFSR on Windows 2008 R2 to replicate a folder which was encrypted with EFS. The setup gave no errors or warnings, but later I read that DFSR does not ...
- 1,530
1
vote
1
answer
211
views
POP connector Exchange Server 2010
An old server with Exchange 2003 is being replaced with a new 2008 R2 server (x64) running Exchange 2010.
On that 2003 machine we had a tool called EFS (Email Forwarding System) but the tool is old ...
- 423
-1
votes
3
answers
3k
views
FreeBSD encryption concept: automatic boot without password or key, when mounted by another system?
Recently, i installed FreeBSD for work and geli for encryption. (Full disk encyrption without boot partition.) When I finished getting it setup, I found that every time it boots, I need to enter the ...
- 125
0
votes
1
answer
762
views
How to deal with LVM encryption on remote restart?
Is there a way to handle the LVM mounting password remotely? This is usually presented during boot on the main console (where the machine physically resides at). I am able to ssh in during the ...
- 6,980
3
votes
2
answers
2k
views
Can root become user and access encrypted home?
The home is mounted unencrypted on login.
I tried accessing it after doing 'su sampleuser', but it was encrypted, which is the expected behavior I guess.
I also tried changing the user's password, ...
- 654
2
votes
1
answer
829
views
add certificate to all files in EFS-folder with script
I try to set up collective access to EFS-folder. I want to add certificates of all users to all files in folder. Is it posible do with using powershell scripts or some another way?
Thanks.
- 578
-4
votes
3
answers
238
views
Can user protect his files from untrusted administrator? [closed]
I am looking for means to prevent my Windows administrator from accessing my files.
My plan is to cipher my files with EFS. As far as I know administrator can access ciphered files if he has EFS ...
- 3
1
vote
1
answer
1k
views
Sharing EFS encrypted
I have standalone, nodomain server. EFS is used on this server for one folder. How to share the encrypted folder? Users on the server are created locally. I tried to export the owner folder ...
- 578
0
votes
1
answer
2k
views
Group Policy Recovery Agent EFS not being used
I am trying to get EFS working on our workstations. First when I tried to set a directory to be encrypted I got a warning about the Recovery Agent certificate being invalid.
It turned out that the ...
- 3,158
0
votes
1
answer
381
views
EFS encrypted files cannot be opened, even with the right key
I created a folder on my Win7 Pro machine, set it to encrypt contents to protect data. Then I opened MMC, added the Certificates snap-in for "my user account", expanded Certificates - Currrent User > ...
- 1