Questions tagged [encrypting-file-system]

The Encrypting File System (EFS) on Microsoft Windows is a feature introduced in version 3.0 of NTFS that provides filesystem-level encryption.

Filter by
Sorted by
Tagged with
3 votes
1 answer
294 views

Heavy NFS metadata traffic flooding NFSv4.1 Server (AWS EFS)

We are observing a massive uptick in metadata requests to an NFSv4.1 (AWS EFS) network drive that is linked to a one or more web servers. This started happening about a week ago across a number of ...
Az Ilari's user avatar
0 votes
0 answers
27 views

Does ecryptfs support AES-256? How can I check?

I have been asked if our workstations are encrypted with AES-256. I have not been able to find this information at ecryptfs.org. Various web searches report conflicting information. Is there a way to ...
dannyman's user avatar
  • 358
0 votes
0 answers
96 views

How to require a password/key/secret supplied by human sysadmin (via an ssh login) for every mount of a LUKS-based volume?

Summary We want to support this scenario: if we sense any security threat that might expose our core data (all stored on a /home NFS mount from our NFS server), we immediately "hard" power off the ...
Johnny Utahh's user avatar
4 votes
2 answers
1k views

Encrypt at rest existing AWS EFS instances - is it possible?

Based on my understanding of AWS documentation it appears that the only way to encrypt at rest existing EFS instances with some data is to create new EFS instances with encryption enabled and copy the ...
Darko Miletic's user avatar
2 votes
1 answer
2k views

It it possible to implement per-user quotas on Amazon EFS?

I'm would like to have a filesystem for network-mounted home directories that can scale easily (per user) at a low cost. EFS seems well-suited to this (especially with Infrequent Access enabled). ...
Ben Davis's user avatar
  • 280
0 votes
1 answer
392 views

Intermitent bug on encrypted swap over Ubuntu 18

Wanting encrypt swap and the only script I found to do it as I want is it: sudo -i cd /root mkdir -p ./.myfolder cd ./.myfolder swapsize='4G' curdir=$(pwd) flNmDev="...
Paul's user avatar
  • 1
-1 votes
1 answer
131 views

Linux refusing mapped image file created with dd as swap device

Getting the error "WRITE ERROR ON SWAP DEVICE" on boot but all works fine when I change the line: truncate -s $swapsize $flPtDev by cp /swap.img $flPtDev The complete script is the following: ...
Mark's user avatar
  • 81
2 votes
1 answer
1k views

Is possible execute crypttab config without rebooting making the encrypted device mapped and available?

I need turn a file into a encrypted device mapped on /dev/mapper/ and to do it the easier way I found is adding a named entry to /etc/crypttab pointing to image file and key file, it works fine and ...
Mark's user avatar
  • 81
-4 votes
1 answer
32 views

directory protection in Ubuntu 14.04 Server [closed]

I want to run the following on a single ubuntu 14.04 server - Asterisk - PHP/Apache/ MySQL This server will be offline at customer's location. I want to protect these folders in a way that if my ...
user3756834's user avatar
0 votes
1 answer
149 views

Some files created years into the future in NFS mount to AWS EFS volume

We just saw a couple files get created years into the future on an EFS volume over an NFS mount from a Linux EC2 instance. The "Change" time is correct, but the Access and Modify are years out. Has ...
Gary Griffith's user avatar
2 votes
2 answers
450 views

Is it possible to secure a VPS from its seller/provider?

I have bought a VPS hosted in the USA through an Iranian company (I live there, it's quite hard to buy one directly.), and I am wondering if it is possible to secure the system against potential ...
HappyFace's user avatar
  • 141
1 vote
1 answer
250 views

Securely encrypt backup for postgres DB

I do not want to encrypt my postgres DB. However, I want encryption at OS level, such that if the files(such as backups or configurations) are moved to any other system, it should be unreadable or non ...
aswin s's user avatar
  • 11
3 votes
1 answer
181 views

Can an EFS encrypted folder be backed up in an Azure Recovery Services Vault?

When I try to back up a Windows EFS encrypted folder on a physical server to an Azure Recovery Services Vault the file size is modified upon recovery and the files cannot be opened (are unrecognizable)...
saminpa's user avatar
  • 141
0 votes
1 answer
159 views

Encrypted file system in a hosted linux system

I'm considering to use an encrypted file system (dm-crypt or gocryptfs) in a linux system hosted by Linode. Can the administrators of Linode access the mounted (i.e., decrypted) contents? I'm not sure ...
lyrin's user avatar
  • 1
0 votes
0 answers
301 views

Can't decrypt EFS encrypted files on external drive even with correct key installed

I'm having trouble decrypting EFS-encrypted files that were copied onto an external drive on another computer even though I have the correct certificate. This is what I did: Enabled EFS on old ...
HansA's user avatar
  • 109
7 votes
3 answers
14k views

Backup AWS EFS to S3

I've been desperately trying to find a way to backup my AWS EFS file system to S3, but cannot seem to find one. There's several EC2 instances running all having access to the mentioned EFS. In order ...
wahtye's user avatar
  • 71
0 votes
0 answers
221 views

File archiver that stores RAW EFS files

I'll start off with the assurance that I have all the EFS certs safely in hand, and that is not what I'm asking about below. Assume I have that part taken care of. I'm trying to backup a some mixed (...
Dan's user avatar
  • 226
-1 votes
2 answers
231 views

How can I protect business data from being removed by an employee using encryption? [closed]

I am looking to beef up security on an office network. Aside from the obvious: physical security, limiting user privileges using Active Directory, running a firewall that does stateful packet ...
user314554's user avatar
0 votes
2 answers
1k views

Why Add button in EFS doesn't exists?

I am trying to enable EFS on a folder and add some others users to access it too. but the Add button doesn't exist on the place it should be. I want to know what is the reason for that ?
Shnd's user avatar
  • 265
2 votes
1 answer
7k views

Windows 2012 Server File Encryption

I am looking for a solution to encrypt directories/files on a Windows 2012 server. Several Excel files will be stored in a share, and I am looking for a solution to encrypt them independently. From ...
Acerbity's user avatar
0 votes
2 answers
3k views

Preeseding a debian stable install with a complex partitioning scheme - missing physical volume

My personal systems run on: An open /boot partition separately random key encrypted /tmp and swap partitions and a password encrypted btrfs lvm volume holding everything else. My latest project is ...
balin's user avatar
  • 123
1 vote
1 answer
746 views

Unable to open/copy files on an encrypted UNC share after reboot of file server

I have 2 Windows 2012 environments. The first is a CMS that is accessing files on a the second server (file server). One of the shares that I have on the file server is marked as encrypted. When ...
Subversion's user avatar
2 votes
1 answer
972 views

Prompt for Certificate Password When Accessing EFS Shares

My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
Brian McElraft's user avatar
2 votes
1 answer
4k views

EFS - how to disallow encrypted files on network share?

I have two servers, both on domain, both Windows Server 2008 R2, to my eye almost identically configured. Server1 allows to copy encrypted files to his network shares, Server2 gives error when trying ...
toffitomek's user avatar
1 vote
1 answer
225 views

Does filesystem encryption strain SSDs?

For security purposes we are required to implement full filesystem encryption on an upcoming server installation. We use the default encryption settings shipped with CentOS 7. My question: as our ...
csvan's user avatar
  • 123
2 votes
1 answer
2k views

Decom old CA and Basic EFS certificates

Getting very close to decommissioning our old CA. The new CA is in place and happily issuing certificates and the old CA has had all the templates removed so no certificates will be issued. My ...
user avatar
2 votes
1 answer
2k views

EFS Recovery Agent not working

I know EFS data recovery has been discussed so many times in the forums but I could not find anything useful in the other threads as I believe I have followed all the required steps but still cannot ...
iSi's user avatar
  • 21
0 votes
0 answers
202 views

Apache DocumentRoot folder encrypted with EFS

As per this question https://stackoverflow.com/questions/7575709/newly-added-files-getting-permissions-error Apache 2.2 is not supposed to be able to access its DocumentRoot if the folder has been ...
mastazi's user avatar
  • 109
2 votes
2 answers
2k views

Decrypt EFS files when copying to windows shared

My users have their documents redirected to a share on a file server running NTFS - very regular setup. EFS works and the users are able to encrypt a folder and files in their redirected documents. ...
ETL's user avatar
  • 6,503
2 votes
1 answer
715 views

Current state of EFS

I need to encrypt a 3.5TB folder on 2008 R2 server. The folder is shared and both users and applications need to access the files(pdf) in it over the network. Since the server is a VM (ESXi 5) ...
user2828557's user avatar
5 votes
1 answer
1k views

Windows Task Scheduler cannot access EFS encrypted folder despite running as a user with access

I have a batch file set to run via Task Scheduler in Windows Server 2008 R2. The batch file is being used to rotate and compress MySQL logs, and the folder containing these logs is encrypted using ...
zako42's user avatar
  • 173
2 votes
1 answer
5k views

Using another user's EFS Certificate

On a domain joined computer, can you encrypt a folder using EFS and then export your certificate/private key and then login as another user and import it to view the encrypted files? I have tried ...
floyd's user avatar
  • 1,530
1 vote
0 answers
283 views

Safe filesystem encryption using mdadm and cryptsetup in EC2

I need to safely store some encrypted information in EC2. For this purpose, I'd like to encrypt a filesystem on my EBS drives to ensure that third-parties won't be able to poke around in my data. ...
Naftuli Kay's user avatar
  • 1,678
0 votes
1 answer
50 views

How to encrypt a user and specific services on a Mac Server?

I am setting up a server in an office, and we want to encrypt the hard drive so that in the event of a physical breach, the data is secure. We initially used FileVault2, but since we need to be able ...
Nixopax's user avatar
-2 votes
2 answers
4k views

Gain access to other people's encrypted files

For a proof of concept I am building a server which will host 2 users. Both users are local admin, and both users are domain users. User1 will encrypt the files with EFS so he can get transparent ...
Snake's user avatar
  • 306
3 votes
1 answer
718 views

Access denied to EFS encrypted files after PC joins domain

I'm experiencing strange behavior with Windows Encrypted File System: I have a machine that is in workgroup mode (not joined to a domain) I encrypt an entire directory structure on the machine (...
Mike Marshall's user avatar
0 votes
1 answer
389 views

Encryption strategy for CentOS on Amazon EC2

Although there is plenty of information about how to create encrypted partitions (like http://silvexis.com/2011/11/26/encrypting-your-data-on-amazon-ec2/), there's not much information suggesting what ...
Peter's user avatar
  • 11
1 vote
1 answer
210 views

EFS encrypted Office documents lose additional users after saving the file

I create a new Word document in 'Office Open XML' format (docx). I then encrypt it using EFS and add several other users to access the file. Now I open the document and edit it, after saving it, the ...
Peter Hahndorf's user avatar
1 vote
1 answer
792 views

How to setup Samba4 to enable NTFS encryption? [closed]

I'm currently giving the sernet.de samba4 (rc1) appliance a shot (running inside vmware player on Windows 7). Providing a share is no problem, but the client still can't choose to encrypt files. What ...
Tobias Kienzler's user avatar
2 votes
1 answer
1k views

EFS Remote Encryption

We have been trying to setup EFS across our domain. Unfortunately Reading/Writing file over network share does not work, we get an "Access Denied" error. Another worrying fact is that I managed to ...
Apoulet's user avatar
  • 31
2 votes
1 answer
4k views

Replicating EFS encrypted files

Recently I attempted to configure Microsoft's DFSR on Windows 2008 R2 to replicate a folder which was encrypted with EFS. The setup gave no errors or warnings, but later I read that DFSR does not ...
floyd's user avatar
  • 1,530
1 vote
1 answer
211 views

POP connector Exchange Server 2010

An old server with Exchange 2003 is being replaced with a new 2008 R2 server (x64) running Exchange 2010. On that 2003 machine we had a tool called EFS (Email Forwarding System) but the tool is old ...
juFo's user avatar
  • 423
-1 votes
3 answers
3k views

FreeBSD encryption concept: automatic boot without password or key, when mounted by another system?

Recently, i installed FreeBSD for work and geli for encryption. (Full disk encyrption without boot partition.) When I finished getting it setup, I found that every time it boots, I need to enter the ...
altman's user avatar
  • 125
0 votes
1 answer
762 views

How to deal with LVM encryption on remote restart?

Is there a way to handle the LVM mounting password remotely? This is usually presented during boot on the main console (where the machine physically resides at). I am able to ssh in during the ...
Chad Harrison's user avatar
3 votes
2 answers
2k views

Can root become user and access encrypted home?

The home is mounted unencrypted on login. I tried accessing it after doing 'su sampleuser', but it was encrypted, which is the expected behavior I guess. I also tried changing the user's password, ...
HappyDeveloper's user avatar
2 votes
1 answer
829 views

add certificate to all files in EFS-folder with script

I try to set up collective access to EFS-folder. I want to add certificates of all users to all files in folder. Is it posible do with using powershell scripts or some another way? Thanks.
Aleksandr Makhov's user avatar
-4 votes
3 answers
238 views

Can user protect his files from untrusted administrator? [closed]

I am looking for means to prevent my Windows administrator from accessing my files. My plan is to cipher my files with EFS. As far as I know administrator can access ciphered files if he has EFS ...
dvv's user avatar
  • 3
1 vote
1 answer
1k views

Sharing EFS encrypted

I have standalone, nodomain server. EFS is used on this server for one folder. How to share the encrypted folder? Users on the server are created locally. I tried to export the owner folder ...
Aleksandr Makhov's user avatar
0 votes
1 answer
2k views

Group Policy Recovery Agent EFS not being used

I am trying to get EFS working on our workstations. First when I tried to set a directory to be encrypted I got a warning about the Recovery Agent certificate being invalid. It turned out that the ...
Phil's user avatar
  • 3,158
0 votes
1 answer
381 views

EFS encrypted files cannot be opened, even with the right key

I created a folder on my Win7 Pro machine, set it to encrypt contents to protect data. Then I opened MMC, added the Certificates snap-in for "my user account", expanded Certificates - Currrent User > ...
John Ly's user avatar