Questions tagged [encryption]
Encryption is transforming information through a cipher to protect it from unauthorized access.
0
votes
0answers
27 views
How are Lightsail Block Storage Devices encrypted? [on hold]
I recently started using Amazon Lightsail to host a small web application. As I figured the system disk is not encrypted by default, I am now considering storing sensitive information (currently a ...
0
votes
0answers
15 views
directory encryption in rhel7 [closed]
How can I create an encrypted directory in rhel7 in such a way that anything added to that directory should get encrypted. Earlier ecryptfs was there but it is deprecated in rhel7. For some reasons I ...
0
votes
0answers
16 views
AWS: SES Rule: S3 Action: fails when choosing bucket that has encryption enabled
I can not create a SES rule to put emails into a S3 bucket that has encryption enabled (on the bucket).
Created a bucket and enabled encryption.
Add a SESPut bucket policy to allow SES. https://docs....
0
votes
1answer
21 views
AWS SES Encryption vs S3 bucket encryption
SES
Configuration for a SES rule allows one to have the email be put into a S3 bucket.
Under this configuration, the option "KMS Key" is available, which would have SES encrypt the email before ...
-1
votes
0answers
22 views
I lost to access to encrypted files after update to Kaspersky Security Center 10.5.1781 and Kaspersky Endpoint Security 11.0.0.6499
I used the Kaspersky Security Center(KSC) 10.3.407 and Kaspersky Endpoint Security(KES) 10.2.4.674 in our network. I set an encryption rule to encrypt the all clients' desktops (just desktop not ...
1
vote
1answer
23 views
e-mail encryption during transfer
for the sake of simplicity i want to visualize the dangers of sending an unencrypted e-mail. I'm just not sure WHO can read unencrypted e-mails.
Lets say i'm using Office365 as mail provider and i ...
0
votes
1answer
9 views
operators in CipherSuite configuration for SSL
I have SSLCipherSuite configured as High:Medium:!aNULL:!eNULL:+High:+Medium
Here I can understand to match or include the ciphers with triple DES (High) and 128 bit encryption (Medium) at start and ...
0
votes
1answer
41 views
LVM - Should I encrypt physical volumes or logical volume?
I have two hard drives and I'm about to build a backup system. Now I'm wondering which solution would be the best.
I encrypt disk1 and disk2. After mounting these I create a volume group and logical ...
0
votes
1answer
83 views
End-End Encryption on SSH passing though 'untrusted' jump servers
I need to SSH between 2 "clients", both behind CGNATs, by using a third party server as a jump. This use case has been covered on this site already but:
How do I make it so the SSH traffic is not ...
-1
votes
1answer
172 views
Enable BitLocker with PowerShell on Windows Server 2016
I have been fighting with this, previously I believe I was able to set it up using the GUI in File Explorer like you would on a Windows 10 machine. However after installing the BitLocker feature and ...
0
votes
1answer
41 views
Configuring Imported Self Signed SSL Certificate to SQL Server Express
I've created a self-signed certificate and configured with SQL Server Express. The encryption works fine on my PC.
When I export the certificate to another PC I can import fine and can see the ...
0
votes
0answers
12 views
Libreswan 3.15 won't initiate opportunist encryption sessions, but 3.23 will - I need 3.15
I have two test systems - west running Libreswan 3.15 & east running Libreswan 3.23 (both are CentOS 6). Both have essentially the same configuration:
east.conf (west.conf is essentially the same)...
0
votes
2answers
33 views
Is it possible to secure a VPS from its seller/provider?
I have bought a VPS hosted in the USA through an Iranian company (I live there, it's quite hard to buy one directly.), and I am wondering if it is possible to secure the system against potential ...
2
votes
3answers
217 views
Samba SMB Encryption - How safe is it?
I recently set up a Samba server on Linux that allows me to access files on this server on Win10 PCs in my local network. But I wondered if I could access this shared drive over the internet since I ...
-2
votes
1answer
385 views
How to setup logrotate with GPG to encrypt for GDPR?
As per GDPR all private data should be encrypted, so I need to encrypt all logs and retrieve them for auditing. I have chosen to perform the encryption during log rotation and to use GnuPG as my ...
-1
votes
1answer
578 views
How to enable support for Authenticated encryption (AEAD) cipher suites on Windows Server
SSL lab test provides grade B for one of my websites due to AEAD issue. I was wondering how we could enable AEAD support to improve the grading to A.
I am using windows server 2008 R2, TLS1.2 is ...
0
votes
1answer
78 views
Encrypting properties with “eyaml edit” without a private key?
I would like to use eyaml edit to edit my Puppet/Hiera configuration files. My configuration files are a mixture of encrypted and plain text content. I want to use eyaml edit to encrypt certain ...
1
vote
1answer
88 views
HAProxy-Apache encrypt connection
I have haproxy_server and apache_server in different datacenters, what is the best way to have encrypt connection between them?
It’s working with the certbotand with the following configuration:
...
0
votes
0answers
38 views
Enable hardware encryption in Bacula with LTO-7
Does Bacula support encryption by using the AES-chip which is integrated in LTO-7 Tapedrive?
Or is there a plugin like "stenc" that could be integrated in Bacula?
1
vote
1answer
122 views
Mount LUKS-encrypted drive at boot, but only if drive is present
I have a series of drives that are are all encrypted with LUKS/dm-crypt. They are not all guaranteed to be plugged in at the time the system boots, but if they are, I would like to ensure they are ...
1
vote
1answer
27 views
Securely encrypt backup for postgres DB
I do not want to encrypt my postgres DB. However, I want encryption at OS level, such that if the files(such as backups or configurations) are moved to any other system, it should be unreadable or non ...
1
vote
1answer
37 views
What is the data flow if using an HSM with an encrypted Database
How would someone implement an HSM if they wanted to encrypt all the tables of a database for example in a 3-tier environment?
Does the app server query the DB, get the encrypted blob and ask the ...
0
votes
0answers
41 views
USB authentication and Encryption on Windows Environment
My boss ask me that he want to secure USB thumb drive usage on our company. He want the USB thumb drive data un-encrypted when some one authenticate to our Active Directory (AD) server whether locally ...
1
vote
0answers
20 views
“Windows does not appear to be on the drive from which it boots”. Veracrypting corporate laptops
I work on the Help Desk of an org. I have been encrypting laptops with VeraCrypt for months now, but suddenly running into the message above in the title. The laptops getting this error don't have ...
0
votes
2answers
76 views
Database encryption or drive encryption
I'm thinking about encrypting the database that contain sensitive user data. Is it better for performance to encrypt the entire drive by using something like bitlocker or is it better to just encrypt ...
1
vote
1answer
413 views
Setting “Store passwords using reversible encryption” to disabled
The setting "Store passwords using reversible encryption" is enabled in our domain and we need to revert this. What happens when this is changed? Will all passwords be encrypted? Or will all users be ...
0
votes
1answer
600 views
Encrypted or Password Protected Docker Container
I have some Docker containers. I want to login the containers with a password.
Is it possible?
If it is not possible then is there way to encrypt some folders in Docker?
I have tried rkt as well. I ...
0
votes
2answers
260 views
Difference between SSL VPN tunneling and SSL in HTTPS [closed]
I'm a beginner, and this is probably an elementary question, but I can't figure it out through some googling.
I'm learning about VPN tunneling right now, and am generally not clear on how VPN ...
1
vote
0answers
1k views
How to encrypt Samba traffic?
How would I create encrypt the traffic that Samba communicates between the server and the client? My settings without encryption look like this:
/etc/samba/smb.conf:
[global]
workgroup = ...
0
votes
1answer
304 views
Nginx ciphers settings [duplicate]
I am trying to understand ciphers settings in nginx.
ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #What TLS types that are supported
ssl_prefer_server_ciphers on; #Use the type that the server prefers
...
1
vote
0answers
127 views
Bitlocker on Hyper-V server
I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD.
I need:
encryption key saved on TPM
...
0
votes
0answers
167 views
Encode and decode pathname in nginx
Normally files can be accessed at:
http://example.com/cats/cat1.zip
I want to encode/encrypt the pathname (/cats/cat1.zip) so that the link is not normally accessible but accessible after the ...
1
vote
1answer
34 views
Is it safe for Windows remote desktop ask for username/password first before check certificate?
When connecting to a Remote Desktop on the client side:
(in my case Windows 8.1 RD client to a Windows 10 Enterprise 1709/16299.98)
We need to enter&transfer username/password on the client first ...
1
vote
1answer
236 views
SFTP with data encryption at rest [closed]
Sorry for my ignorance, I am having a peculiar doubt in setting up an SFTP server,
setup an SFTP server with password/keyfile for authentication.
The SFTP user directory should be encrypted at rest.
...
0
votes
0answers
42 views
Token slot_id order changes when restarting
Hello and thanks for taking the time to read this.
Issue:
I have 4 token devices with the same model and the same name, I rely on the slot id (and the serial) to identify wich one to use.
After 5 ...
0
votes
1answer
41 views
How to create a encrypted linux container to deploy web application on external server?
I need to deploy a Rails application to client's on-premises server and I want to prevent the viewing and modification of source code.
Client has physical and root access to the server.
How can I ...
2
votes
1answer
69 views
Cryptsetup lost password but open device
first, I know it is a very bad situtation and one should always have a backup of keys but the problem is not caused by me. I only was ask for help.
The drive is encrypted using cryptsetup with luks. ...
0
votes
1answer
364 views
How to store hashes in ipsec.secrets when using Strongswan with eap-mschapv2?
I am using eap-mschapv2 as an authentication method. It requires to store plain text passwords in ipsec.secrets. I.e. I have a password like this:
user : EAP "mypassword"
I want to use something ...
-1
votes
2answers
106 views
What happens when an encrypted drive that is running (and thus decrypted) is unplugged? [closed]
Encrypted drives are usually decrypted at boot, so if the system is running live and the drive is unplugged while "hot" and plugged into another system will the data still be unencrypted?
I may be ...
0
votes
0answers
17 views
Genereting a key pair in gpg using some kind of an initial private key/subkey
I have an openpgp library in js. Here's the code:
var openpgp = require('openpgp');
var privKey = getExternalPrivKey();
var options = {
curve: 'secp256k1',
userIds: {name: "my_user_id", ...
0
votes
1answer
356 views
How do I change encryption from RC4 to AES in order to allow RDP to my remote servers?
I have multiple physical and virtual servers on a company domain. The physical and virtual servers are all still Windows 2008 R2. The clients have all been updated to Windows 10 from Windows 7 in ...
0
votes
2answers
402 views
Mailbox on-the-fly decryption (dovecot)
To avoid casual mailbox snooping for an IMAP server I am thinking of "transparent encryption" setup that would:
Public key encrypt incoming messages at local delivery time
Private key decrypt said ...
1
vote
0answers
140 views
Self-signed secure boot initramfs and intel-ucode
I've set up a self-signed refind and linux kernel. The problem is that intel-ucode and initramfs resides on /boot, which is an unencrypted fat32 ESP filesytem - UEFI specific.
How can I secure my ...
1
vote
2answers
458 views
Multiple VLAN's - Multiple SSID or Single SSID and Multiple VLAN's (radius)
I have a question regarding best practice. I have a case where i need multiple VLAN's in wireless networks. What is more performant?
Having multiple SSID and each of them have a VLAN (this also mean ...
0
votes
1answer
96 views
Samba using homes share with an encrypted directory
Originally Posted on SuperUser but realized it should be posted here.
I have a Samba fileserver that I set up to access my files over a VPN connection to my house. I configured my VPN client to ...
0
votes
0answers
23 views
Encrypting files vs disk for transfer
I have a hosted solution that's on CentOS. Over the years nearly 1TB of files have been uploaded to the server. I now need to transfer these files to another vendor. My ISP has attached a USB drive ...
1
vote
2answers
665 views
How to enable SAMBA encryption and do not require user authentication
I have a perfectly working SAMBA (version 4.3.11) share hosted on ubuntu.
SAMBA shares are open to ANY user (local intranet)
As soon as I added encryption settings, traffic is encrypted BUT all of ...
0
votes
1answer
18 views
AWS: encrypted ROOT EBS doesn't support t2 instance types
I created an AMI from my web server. Then I copied the snapshot, checking the "encrypted" checkbox. Then I created an AMI from this encrypted snapshot. Then I tried to launch a new instance from this ...
1
vote
2answers
70 views
Does Mediawiki encrypt logins by default as the browser sends them to the server?
Several searches only turned up questions about encrypting login info on the server side. Does Mediawiki encrypt logins after you type them in the browser and send them? (to prevent a man-in-the-...
0
votes
1answer
31 views
Fresh Install Linux with Encryption won't boot
I having a problem whereby after I fresh install Debian and enable encryption (Encrypted LVM), it won't boot into the OS, just seeing a black screen.
For a test, I also installed Debian without ...
