Questions tagged [encryption]

Encryption is transforming information through a cipher to protect it from unauthorized access.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

How to encrypt nfs which is mounted on AWS ec2

We have netapp volumes attached to EC2 instance. these are nfs , which are sync with on premise and make sure data in on premise and that of NFS which is mounted on EC2 are in sync. even though ...
-1
votes
0answers
9 views

Encrypt a dualboot-laptop HDD [closed]

I posted something on superuser but I don't know whether it belongs more to here than there, and whether that forum users will be more suited to answer this need than you https://superuser.com/...
3
votes
1answer
40 views

What filesystem and RAID for a server syncing linux windows macOS android and iOS machines

I plan to have one master server including several HDDs (for RAID5, probably all homogeneous with 4TB each), and one remote slave server containing only one big capacity HDD, or a bunch of disks not ...
0
votes
0answers
12 views

smbd process 100% for specific user when puling files/mount

Need help tracking down this issue (high cpu usage) or is this normal... Whenever our users access or sync files, the CPU spikes under their name, accessing via another linux box over mounted smb w/...
0
votes
1answer
65 views

RDP Connection closes due to Encryption error

My azure windows VM has been working fine for 3 months since it was set up. I tried to reconnect today via RDP and it came up with Remote Desktop Application - because of an error in data encrption ...
2
votes
2answers
85 views

Set default data encryption policy in exchange online

I have recently enabled the customer key on my o365 tennant. I have been able to set my mailboxes DEP with the following : Get-Mailbox | Set-Mailbox -DataEncryptionPolicy "MyDEPPolicyNmae" Now I'm ...
0
votes
0answers
34 views

Sending TLS encrypted email from website Fails

I have an e-commerce just migrated to a new hosting. Since then the email sending is not working as it should. I made a simple PHP script with PHP mailer to better debug it. I found that the problem ...
-1
votes
1answer
29 views

Generate PFX file using P7B file with private key data in text format

I have the certificate in P7B format and along with I have private key data in text file format as below. Can anyone please help how can I generate the PFX certificate using this data? -----BEGIN ...
0
votes
0answers
41 views

Modify OpenLDAP hashing algorithm [duplicate]

I have a CentOS7 Server running slapd 2.4.44 and I'd like to modify the default hashing algorithm being used. Instead of using SSHA, i'd like to use SHA-256 or SHA-512. I've been having trouble ...
-1
votes
1answer
40 views

When was LUKS first released?

When was Linux Unified Key Setup (LUKS) first released--both as an open standard and later made available as an implementation with cryptsetup?
0
votes
1answer
158 views

How to renew an expired certificate for PCs that must connect via VPN to a server in Azure?

I created my self-signed certificates using PowerShell per https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-certificates-point-to-site#clientexport a year ago and it's time to renew them....
0
votes
1answer
85 views

Openldap re-hashes already hashed password

I have an openldap with ppolicy on SSHA-512. When clear text password is sent from client, the password will be stored as SSHA-512, fine. My problem appears, once already hashed password is send e.g ...
0
votes
2answers
61 views

Why AWS encryption for EBS and S3 is disabled by default? [closed]

For EBS and S3 encryption (even via the default key from KMS) is disabled by default, as I understood from the documentation, there is no difference to the user if volume/objects is/are encrypted ...
2
votes
1answer
118 views

Encrypt at rest existing AWS EFS instances - is it possible?

Based on my understanding of AWS documentation it appears that the only way to encrypt at rest existing EFS instances with some data is to create new EFS instances with encryption enabled and copy the ...
0
votes
0answers
79 views

Encryption of network shared folder | Server 2016 with Windows 10 Pro desktops

Getting confused on encryption options. I have EFS (encrypted file system) setup for W10 workstations for local drives using the 2016 server as the recovery agent Apparently EFS should not be used ...
0
votes
0answers
97 views

Method for creating accessible, compressed and deduplicated long-term archives

I am looking for a good method of archiving larger amounts of data (multiple 10 GB of mixed data, partially containing duplicates) over a longer time frame. The data should be stored as efficiently as ...
1
vote
1answer
39 views

Writing encrypted syslogs

I have a request to find out if there is a way to store syslog messages encrypted. I don't have a problem with making logrotate (or a bash script) encrypt messages nightly, but is there a way that I ...
0
votes
0answers
21 views

Can't mount encrypted disk from old cryptsetup

I've got a very old USB disk, on which there's a very old encrypted partition. It mounts as /dev/sdb1 On a newish box (with cryptsetup 1.7.3), I can attach to it with: cryptsetup -c aes-plain -s ...
0
votes
0answers
135 views

Mac OS Mojave: Request SMB connection to be encrypted

I connect to a SMB share from a Mac client (Mac OS Mojave, Finder->Go->"Connect to Server..."). When setting "smb encrypt = mandatory" on the server, the connection is encrypted (Wireshark: Info: ...
-1
votes
1answer
83 views

Encrypt MySQL database clientside

I want to store data from medical patients into an online database so that I can access is from everywhere using a web browser. For reasons of data privacy, it is necessary that the hosting provider ...
0
votes
0answers
94 views

Full-disk encryption with dm-crypt requiring key-file AND password?

I am currently installing Arch Linux on ZFS on a dm-crypt (completely) encrypted drive, using the very helpful Arch Linux wiki pages regarding the subject: Encrypting an entire disk: plain dm-crypt ...
0
votes
1answer
116 views

How to install a certificate and encryption on SQL Server without downtime?

So I have a SQL Server 2016 instance running a mission critical workload. I want to install an SSL/TLS (publicly signed) certificate into the server, and enable encryption. But I don't want to incur ...
0
votes
0answers
28 views

Combine two AES 256bit keys for 512bit LUKS master key (memory dump)

I am currently trying to decrypt a LUKS volume with a memory dump for testing purposes (how secure is LUKS in a VM). I successfully extracted two 256bit AES keys. But to decrypt the LUKS partition I ...
1
vote
1answer
142 views

How to access mysql console on Docker container using secrets

I've been able to access Mysql console on a Mariadb Docker container. From my local machine I can run this command to access the console (I have mariadb installed locally): mysql -h localhost -P ...
2
votes
1answer
115 views

Why can't I manually seed the FreeBSD random number generator?

Years ago, I could manually seed the random number generator in FreeBSD by setting: sysctl -w kern.random.sys.seeded=0 ... and then if I deleted my SSH keys (on purpose) and restarted sshd, I would ...
0
votes
1answer
182 views

How to configure OpenVpn server with multiple clients using asymethric key

Introduction I want to configure OpenVpn with 2 clients and 1 server but i only mannage to use it with 1 server and 1 client. Setup Server ip: 10.10.102.146 Client ips: 10.10.102.138 Server ...
4
votes
0answers
66 views

Bitlocker - mainboard exchange won't require recovery password - why?

A mainboard died. It was exchanged for the same board type (same bios and config, as well, also a new CPU but of the same type). The hard drive is encrypted with bitlocker (on Win10 Pro v1903) and I ...
0
votes
0answers
30 views

How do I get a certificate to sign a file and make it trusted?

I may not be using the correct words to describe what I'm trying to do, but I'd like to have my own certificate to digitally sign files so they can be "trusted". I'm very technical, but have little ...
0
votes
1answer
2k views

How can I disable TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 cipher in Apache2?

In SSL labs, I got that I'm using this "weak cipher": TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 Now in Apache, this is the set of suites I have enabled: SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:...
0
votes
0answers
86 views

NextCloud encryption key backup

I’m looking into setting up a self-hosted NextCloud, and back it up to an external storage (Dropbox, S3...). I want this backup to be encrypted. Fortunately, that is supported natively by NextCloud. ...
0
votes
1answer
52 views

Forcing encryption for outgoing SMTP with Postfix *per User*

I'm trying to configure postifx smtp_tls_policy_maps so that i can set per user outgoing emails must be encrypted. One example is the email provider mailbox.org. As one can infer from the job ...
0
votes
0answers
17 views

Is there a best practice for storing sensitive data in Amazon RDS?

I've got an Aurora DB that's going to contain a key and two sensitive fields, like so: | Key | Sensitive1 | Sensitive2 | |--------------------------------------|----...
1
vote
0answers
146 views

making HTTPS work on LAN with self signed certificate

This is on a local area network (LAN). There is no internet connection. One admin has admin access to both the linux server and windows10 pc's. I have a linux server running third party software to ...
0
votes
1answer
143 views

Unable to create cloud KMS encrypted PVC in GCP: googleapi: Error 400: Invalid resource usage

I'm trying to set up CMEK in my cluster as per the details mentioned here: https://cloud.google.com/kubernetes-engine/docs/how-to/dynamic-provisioning-cmek#dynamically_provision_an_encrypted I have ...
1
vote
0answers
30 views

Remote Office 365 worker - laptop lockdown

We have a small Office 365 tenant of about 20 users, mix of E3 and Business Essentials. We are now migrated from a local LAN file server to SharePoint Online and OneDrive so would like to move the ...
1
vote
0answers
26 views

Encrypting communication between between Microservice in my company and AWS

I am dealing with communication between microservices. Microservice A - Angular6/django Microservice B - NodeJS My Microservice A is in company network and Microservice B is in AWS. we need to find ...
0
votes
1answer
24 views

Can MS AD Certificate Services maintain both public and private keys in active directory?

Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and ...
0
votes
1answer
256 views

Lock removable drives to domain/network with BitLocker

I have a network/domain of PCs that users use and don't have administrative privileges. Occasionally, they copy some data to USB drives to move between machines. I need to prevent data written to ...
1
vote
1answer
38 views

How to protect data on Windows Server

I'm renting an unmanaged dedicated (physical) server, running Windows Server (currently 2012 R2, but it can be changed to another version of the Standard edition). I have a custom Windows service ...
1
vote
1answer
109 views

How to build a virtual machine in an encrypted container with virsh

I would like to use the volume encryption mechanism of libvirt. However, I was unable to find information about how to use this feature when running virt-install. How do I pass the related options? ...
0
votes
1answer
100 views

Outlook sMIME certificates location, errors, and background work

We have an situation. Our customer can get sMIME encrypted mails and reply to that email. But when he wants to send it with new email he is getting an error message as if the recipient email does not ...
0
votes
0answers
19 views

DEBIAN 9 Encrypted home on separate disk acccess via SFTP with no login shell

i have a Debian 9 server with /home on a separate disk. There are mutiple users with sftp accounts, they all have no login shell to increase security, so plain sftp only. Similar to this: https://...
3
votes
1answer
803 views

win10 how to encrypt single file, right click folder encrypt invalid recovery certificate

In window 10 enterprise, corporate environment (if it matters). I have a single file with info I want to protect, and I want to encrypt just this single file. And I only want to do this in Windows, ...
0
votes
1answer
16 views

server host key usage problem

I have my server host key(private key) in Openssl format that i want to use for server authentication. I prefer to use the trust model that client local database should associates each host name with ...
4
votes
1answer
852 views

Can I encrypt a whole pool with ZFSoL 0.8.1?

I have compiled ZFS 0.8.1 for my server, and it is running fine. I am also able to create encrypted filesystems like mypool/myencfs. However, mypool is also a filesystem, and it seems that I cannot ...
0
votes
0answers
21 views

postfix outgoing smtp tls for some domains only

in a shared environment default value "smtp_tls_security_level=may" is may. but we have 3 domains that want to send out only tls secured mails. is it possible to select some of outgoing domains use ...
2
votes
0answers
3k views

How to disallow SMB1 and SMB2 but still allow connections from Linux smbclient and list shares using Thunar?

Running a Samba server, I guess it is a good idea to require encryption and SMB3. So I tried setting these two options in /etc/samba/smb.conf (see documentation) in the [global] section: smb encrypt =...
1
vote
1answer
233 views

How to encrypt AWS root volumes via Terraform

There doesn't appear to be an option to encrypt the root volumes via terraform. Any recommendations on how to do it?
2
votes
0answers
375 views

OpenVPN with authentication but without encryption does not work with multiple clients

I'm trying to set up a system in Linux where OpenVPN tunnels are authenticated but the actual traffic is not encrypted. With one server and one client everything is working fine. Here are the relevant ...
1
vote
1answer
49 views

Proxy decrypting and serving remote encrypted resources

Imagine the following scenario: Host A serves via HTTP hello_world.jpg, which has been AES-encrypted. Host B, which acts as a proxy being aware of Host A's resources, responds to a HTTP call by ...

1
2 3 4 5
15