Questions tagged [encrypting-file-system]
The Encrypting File System (EFS) on Microsoft Windows is a feature introduced in version 3.0 of NTFS that provides filesystem-level encryption.
71
questions
0
votes
0answers
20 views
EFS encryption cannot be removed by creating user nor by admin
I have a client who suddenly discovered that one of his network drives had EFS encryption turned on it. I was able to turn off the encryption on the whole drive except for one folder and its files.
...
0
votes
0answers
19 views
whole disk encryption when underlying device sectors failing
I use luks (for system partitions) and truecrypt and veracrypt (for data partitons) whole disk encryption. Works pretty well.
But what is some sector of phisical hdd will fail to write or\and read?
...
0
votes
0answers
60 views
How to require a password/key/secret supplied by human sysadmin (via an ssh login) for every mount of a LUKS-based volume?
Summary
We want to support this scenario: if we sense any security threat that might expose our core data (all stored on a /home NFS mount from our NFS server), we immediately "hard" power off the ...
2
votes
1answer
192 views
Encrypt at rest existing AWS EFS instances - is it possible?
Based on my understanding of AWS documentation it appears that the only way to encrypt at rest existing EFS instances with some data is to create new EFS instances with encryption enabled and copy the ...
1
vote
1answer
310 views
It it possible to implement per-user quotas on Amazon EFS?
I'm would like to have a filesystem for network-mounted home directories that can scale easily (per user) at a low cost. EFS seems well-suited to this (especially with Infrequent Access enabled). ...
0
votes
1answer
140 views
Intermitent bug on encrypted swap over Ubuntu 18
Wanting encrypt swap and the only script I found to do it as I want is it:
sudo -i
cd /root
mkdir -p ./.myfolder
cd ./.myfolder
swapsize='4G'
curdir=$(pwd)
flNmDev="...
-1
votes
1answer
98 views
Linux refusing mapped image file created with dd as swap device
Getting the error "WRITE ERROR ON SWAP DEVICE" on boot but all works fine when I change the line:
truncate -s $swapsize $flPtDev
by
cp /swap.img $flPtDev
The complete script is the following:
...
0
votes
1answer
187 views
Is possible execute crypttab config without rebooting making the encrypted device mapped and available?
I need turn a file into a encrypted device mapped on /dev/mapper/ and to do it the easier way I found is adding a named entry to /etc/crypttab pointing to image file and key file, it works fine and ...
-4
votes
1answer
24 views
directory protection in Ubuntu 14.04 Server [closed]
I want to run the following on a single ubuntu 14.04 server
- Asterisk
- PHP/Apache/ MySQL
This server will be offline at customer's location.
I want to protect these folders in a way that if my ...
0
votes
1answer
88 views
Some files created years into the future in NFS mount to AWS EFS volume
We just saw a couple files get created years into the future on an EFS volume over an NFS mount from a Linux EC2 instance.
The "Change" time is correct, but the Access and Modify are years out.
Has ...
0
votes
2answers
131 views
Is it possible to secure a VPS from its seller/provider?
I have bought a VPS hosted in the USA through an Iranian company (I live there, it's quite hard to buy one directly.), and I am wondering if it is possible to secure the system against potential ...
1
vote
1answer
119 views
Securely encrypt backup for postgres DB
I do not want to encrypt my postgres DB. However, I want encryption at OS level, such that if the files(such as backups or configurations) are moved to any other system, it should be unreadable or non ...
3
votes
1answer
134 views
Can an EFS encrypted folder be backed up in an Azure Recovery Services Vault?
When I try to back up a Windows EFS encrypted folder on a physical server to an Azure Recovery Services Vault the file size is modified upon recovery and the files cannot be opened (are unrecognizable)...
0
votes
1answer
131 views
Encrypted file system in a hosted linux system
I'm considering to use an encrypted file system (dm-crypt or gocryptfs) in a linux system hosted by Linode. Can the administrators of Linode access the mounted (i.e., decrypted) contents? I'm not sure ...
0
votes
0answers
212 views
Can't decrypt EFS encrypted files on external drive even with correct key installed
I'm having trouble decrypting EFS-encrypted files that were copied onto an external drive on another computer even though I have the correct certificate.
This is what I did:
Enabled EFS on old ...
7
votes
3answers
12k views
Backup AWS EFS to S3
I've been desperately trying to find a way to backup my AWS EFS file system to S3, but cannot seem to find one.
There's several EC2 instances running all having access to the mentioned EFS.
In order ...
0
votes
0answers
149 views
File archiver that stores RAW EFS files
I'll start off with the assurance that I have all the EFS certs safely in hand, and that is not what I'm asking about below. Assume I have that part taken care of.
I'm trying to backup a some mixed (...
-1
votes
2answers
121 views
How can I protect business data from being removed by an employee using encryption? [closed]
I am looking to beef up security on an office network. Aside from the obvious: physical security, limiting user privileges using Active Directory, running a firewall that does stateful packet ...
0
votes
2answers
646 views
Why Add button in EFS doesn't exists?
I am trying to enable EFS on a folder and add some others users to access it too. but the Add button doesn't exist on the place it should be. I want to know what is the reason for that ?
2
votes
1answer
7k views
Windows 2012 Server File Encryption
I am looking for a solution to encrypt directories/files on a Windows 2012 server.
Several Excel files will be stored in a share, and I am looking for a solution to encrypt them independently. From ...
0
votes
2answers
2k views
Preeseding a debian stable install with a complex partitioning scheme - missing physical volume
My personal systems run on:
An open /boot partition
separately random key encrypted /tmp and swap partitions and
a password encrypted btrfs lvm volume holding everything else.
My latest project is ...
1
vote
1answer
712 views
Unable to open/copy files on an encrypted UNC share after reboot of file server
I have 2 Windows 2012 environments. The first is a CMS that is accessing files on a the second server (file server).
One of the shares that I have on the file server is marked as encrypted. When ...
2
votes
1answer
893 views
Prompt for Certificate Password When Accessing EFS Shares
My boss wants to set up encrypted file shares using EFS on Windows Server 2012 R2 Boxes accessed by Windows 8.1 clients. I've been able to set the default DRA, issue certificates in test cases and so ...
2
votes
1answer
3k views
EFS - how to disallow encrypted files on network share?
I have two servers, both on domain, both Windows Server 2008 R2, to my eye almost identically configured.
Server1 allows to copy encrypted files to his network shares, Server2 gives error when trying ...
1
vote
1answer
214 views
Does filesystem encryption strain SSDs?
For security purposes we are required to implement full filesystem encryption on an upcoming server installation. We use the default encryption settings shipped with CentOS 7.
My question: as our ...
2
votes
1answer
1k views
Decom old CA and Basic EFS certificates
Getting very close to decommissioning our old CA. The new CA is in place and happily issuing certificates and the old CA has had all the templates removed so no certificates will be issued.
My ...
2
votes
1answer
2k views
EFS Recovery Agent not working
I know EFS data recovery has been discussed so many times in the forums but I could not find anything useful in the other threads as I believe I have followed all the required steps but still cannot ...
0
votes
0answers
179 views
Apache DocumentRoot folder encrypted with EFS
As per this question https://stackoverflow.com/questions/7575709/newly-added-files-getting-permissions-error Apache 2.2 is not supposed to be able to access its DocumentRoot if the folder has been ...
2
votes
2answers
2k views
Decrypt EFS files when copying to windows shared
My users have their documents redirected to a share on a file server running NTFS - very regular setup. EFS works and the users are able to encrypt a folder and files in their redirected documents.
...
2
votes
1answer
630 views
Current state of EFS
I need to encrypt a 3.5TB folder on 2008 R2 server.
The folder is shared and both users and applications need to access the files(pdf) in it over the network.
Since the server is a VM (ESXi 5) ...
5
votes
1answer
890 views
Windows Task Scheduler cannot access EFS encrypted folder despite running as a user with access
I have a batch file set to run via Task Scheduler in Windows Server 2008 R2. The batch file is being used to rotate and compress MySQL logs, and the folder containing these logs is encrypted using ...
2
votes
1answer
4k views
Using another user's EFS Certificate
On a domain joined computer, can you encrypt a folder using EFS and then export your certificate/private key and then login as another user and import it to view the encrypted files? I have tried ...
1
vote
0answers
258 views
Safe filesystem encryption using mdadm and cryptsetup in EC2
I need to safely store some encrypted information in EC2. For this purpose, I'd like to encrypt a filesystem on my EBS drives to ensure that third-parties won't be able to poke around in my data. ...
0
votes
1answer
42 views
How to encrypt a user and specific services on a Mac Server?
I am setting up a server in an office, and we want to encrypt the hard drive so that in the event of a physical breach, the data is secure. We initially used FileVault2, but since we need to be able ...
-2
votes
2answers
3k views
Gain access to other people's encrypted files
For a proof of concept I am building a server which will host 2 users.
Both users are local admin, and both users are domain users.
User1 will encrypt the files with EFS so he can get transparent ...
3
votes
1answer
621 views
Access denied to EFS encrypted files after PC joins domain
I'm experiencing strange behavior with Windows Encrypted File System:
I have a machine that is in workgroup mode (not joined to a domain)
I encrypt an entire directory structure on the machine (...
0
votes
1answer
378 views
Encryption strategy for CentOS on Amazon EC2
Although there is plenty of information about how to create encrypted partitions (like http://silvexis.com/2011/11/26/encrypting-your-data-on-amazon-ec2/), there's not much information suggesting what ...
1
vote
1answer
183 views
EFS encrypted Office documents lose additional users after saving the file
I create a new Word document in 'Office Open XML' format (docx). I then encrypt it using EFS and add several other users to access the file.
Now I open the document and edit it, after saving it, the ...
1
vote
1answer
755 views
How to setup Samba4 to enable NTFS encryption? [closed]
I'm currently giving the sernet.de samba4 (rc1) appliance a shot (running inside vmware player on Windows 7). Providing a share is no problem, but the client still can't choose to encrypt files. What ...
2
votes
1answer
1k views
EFS Remote Encryption
We have been trying to setup EFS across our domain.
Unfortunately Reading/Writing file over network share does not work, we get an "Access Denied" error.
Another worrying fact is that I managed to ...
2
votes
1answer
3k views
Replicating EFS encrypted files
Recently I attempted to configure Microsoft's DFSR on Windows 2008 R2 to replicate a folder which was encrypted with EFS. The setup gave no errors or warnings, but later I read that DFSR does not ...
1
vote
1answer
207 views
POP connector Exchange Server 2010
An old server with Exchange 2003 is being replaced with a new 2008 R2 server (x64) running Exchange 2010.
On that 2003 machine we had a tool called EFS (Email Forwarding System) but the tool is old ...
-1
votes
3answers
3k views
FreeBSD encryption concept: automatic boot without password or key, when mounted by another system?
Recently, i installed FreeBSD for work and geli for encryption. (Full disk encyrption without boot partition.) When I finished getting it setup, I found that every time it boots, I need to enter the ...
0
votes
1answer
659 views
How to deal with LVM encryption on remote restart?
Is there a way to handle the LVM mounting password remotely? This is usually presented during boot on the main console (where the machine physically resides at). I am able to ssh in during the ...
3
votes
2answers
2k views
Can root become user and access encrypted home?
The home is mounted unencrypted on login.
I tried accessing it after doing 'su sampleuser', but it was encrypted, which is the expected behavior I guess.
I also tried changing the user's password, ...
2
votes
1answer
725 views
add certificate to all files in EFS-folder with script
I try to set up collective access to EFS-folder. I want to add certificates of all users to all files in folder. Is it posible do with using powershell scripts or some another way?
Thanks.
-4
votes
3answers
230 views
Can user protect his files from untrusted administrator? [closed]
I am looking for means to prevent my Windows administrator from accessing my files.
My plan is to cipher my files with EFS. As far as I know administrator can access ciphered files if he has EFS ...
1
vote
1answer
1k views
Sharing EFS encrypted
I have standalone, nodomain server. EFS is used on this server for one folder. How to share the encrypted folder? Users on the server are created locally. I tried to export the owner folder ...
0
votes
1answer
2k views
Group Policy Recovery Agent EFS not being used
I am trying to get EFS working on our workstations. First when I tried to set a directory to be encrypted I got a warning about the Recovery Agent certificate being invalid.
It turned out that the ...
0
votes
1answer
336 views
EFS encrypted files cannot be opened, even with the right key
I created a folder on my Win7 Pro machine, set it to encrypt contents to protect data. Then I opened MMC, added the Certificates snap-in for "my user account", expanded Certificates - Currrent User > ...
