Questions tagged [encryption]

Encryption is transforming information through a cipher to protect it from unauthorized access.

Filter by
Sorted by
Tagged with
1 vote
1 answer
179 views

HAProxy-Apache encrypt connection

I have haproxy_server and apache_server in different datacenters, what is the best way to have encrypt connection between them? It’s working with the certbotand with the following configuration: ...
pata2004's user avatar
2 votes
1 answer
569 views

Enable hardware encryption in Bacula with LTO-7

Does Bacula support encryption by using the AES-chip which is integrated in LTO-7 Tapedrive? Or is there a plugin like "stenc" that could be integrated in Bacula?
robinPVS buhrPVS's user avatar
3 votes
1 answer
2k views

Mount LUKS-encrypted drive at boot, but only if drive is present

I have a series of drives that are are all encrypted with LUKS/dm-crypt. They are not all guaranteed to be plugged in at the time the system boots, but if they are, I would like to ensure they are ...
chimeracoder's user avatar
1 vote
1 answer
272 views

Securely encrypt backup for postgres DB

I do not want to encrypt my postgres DB. However, I want encryption at OS level, such that if the files(such as backups or configurations) are moved to any other system, it should be unreadable or non ...
aswin s's user avatar
  • 11
0 votes
1 answer
176 views

What is the data flow if using an HSM with an encrypted Database

How would someone implement an HSM if they wanted to encrypt all the tables of a database for example in a 3-tier environment? Does the app server query the DB, get the encrypted blob and ask the ...
jouell's user avatar
  • 621
0 votes
0 answers
105 views

USB authentication and Encryption on Windows Environment

My boss ask me that he want to secure USB thumb drive usage on our company. He want the USB thumb drive data un-encrypted when some one authenticate to our Active Directory (AD) server whether locally ...
dchochan's user avatar
  • 105
1 vote
0 answers
40 views

"Windows does not appear to be on the drive from which it boots". Veracrypting corporate laptops

I work on the Help Desk of an org. I have been encrypting laptops with VeraCrypt for months now, but suddenly running into the message above in the title. The laptops getting this error don't have ...
WakeDemons3's user avatar
1 vote
2 answers
1k views

Database encryption or drive encryption

I'm thinking about encrypting the database that contain sensitive user data. Is it better for performance to encrypt the entire drive by using something like bitlocker or is it better to just encrypt ...
Ryan's user avatar
  • 13
1 vote
1 answer
5k views

Setting "Store passwords using reversible encryption" to disabled

The setting "Store passwords using reversible encryption" is enabled in our domain and we need to revert this. What happens when this is changed? Will all passwords be encrypted? Or will all users be ...
zsheppard's user avatar
2 votes
1 answer
5k views

Encrypted or Password Protected Docker Container

I have some Docker containers. I want to login the containers with a password. Is it possible? If it is not possible then is there way to encrypt some folders in Docker? I have tried rkt as well. I ...
user454491's user avatar
1 vote
2 answers
2k views

Difference between SSL VPN tunneling and SSL in HTTPS [closed]

I'm a beginner, and this is probably an elementary question, but I can't figure it out through some googling. I'm learning about VPN tunneling right now, and am generally not clear on how VPN ...
Y     e     z's user avatar
1 vote
0 answers
2k views

How to encrypt Samba traffic?

How would I create encrypt the traffic that Samba communicates between the server and the client? My settings without encryption look like this: /etc/samba/smb.conf: [global] workgroup = ...
Socrates's user avatar
  • 271
1 vote
1 answer
1k views

Nginx ciphers settings [duplicate]

I am trying to understand ciphers settings in nginx. ssl_protocols TLSv1 TLSv1.1 TLSv1.2; #What TLS types that are supported ssl_prefer_server_ciphers on; #Use the type that the server prefers ...
Araw's user avatar
  • 113
1 vote
0 answers
405 views

Bitlocker on Hyper-V server

I have installed Hyper-V server on my new machine and then I added the Bitlocker function and initialized TPM. Now, I am trying to enable Bitlocker on the HDD. I need: encryption key saved on TPM ...
Vilican's user avatar
  • 129
3 votes
2 answers
213 views

Is it safe for Windows remote desktop ask for username/password first before check certificate?

When connecting to a Remote Desktop on the client side: (in my case Windows 8.1 RD client to a Windows 10 Enterprise 1709/16299.98) We need to enter&transfer username/password on the client first ...
imoc's user avatar
  • 53
1 vote
1 answer
2k views

SFTP with data encryption at rest [closed]

Sorry for my ignorance, I am having a peculiar doubt in setting up an SFTP server, setup an SFTP server with password/keyfile for authentication. The SFTP user directory should be encrypted at rest. ...
Bidyut's user avatar
  • 121
0 votes
0 answers
253 views

Token slot_id order changes when restarting

Hello and thanks for taking the time to read this. Issue: I have 4 token devices with the same model and the same name, I rely on the slot id (and the serial) to identify wich one to use. After 5 ...
LordNeo's user avatar
  • 113
0 votes
1 answer
88 views

How to create a encrypted linux container to deploy web application on external server?

I need to deploy a Rails application to client's on-premises server and I want to prevent the viewing and modification of source code. Client has physical and root access to the server. How can I ...
PGill's user avatar
  • 101
2 votes
1 answer
1k views

Cryptsetup lost password but open device

first, I know it is a very bad situtation and one should always have a backup of keys but the problem is not caused by me. I only was ask for help. The drive is encrypted using cryptsetup with luks. ...
Aaryaman's user avatar
2 votes
1 answer
2k views

How to store hashes in ipsec.secrets when using Strongswan with eap-mschapv2?

I am using eap-mschapv2 as an authentication method. It requires to store plain text passwords in ipsec.secrets. I.e. I have a password like this: user : EAP "mypassword" I want to use something ...
Oleksandr's user avatar
  • 763
-1 votes
2 answers
917 views

What happens when an encrypted drive that is running (and thus decrypted) is unplugged? [closed]

Encrypted drives are usually decrypted at boot, so if the system is running live and the drive is unplugged while "hot" and plugged into another system will the data still be unencrypted? I may be ...
SamCyanide's user avatar
2 votes
2 answers
10k views

How do I change encryption from RC4 to AES in order to allow RDP to my remote servers?

I have multiple physical and virtual servers on a company domain. The physical and virtual servers are all still Windows 2008 R2. The clients have all been updated to Windows 10 from Windows 7 in ...
Hourglass's user avatar
1 vote
2 answers
2k views

Mailbox on-the-fly decryption (dovecot)

To avoid casual mailbox snooping for an IMAP server I am thinking of "transparent encryption" setup that would: Public key encrypt incoming messages at local delivery time Private key decrypt said ...
Alien Life Form's user avatar
1 vote
0 answers
493 views

Self-signed secure boot initramfs and intel-ucode

I've set up a self-signed refind and linux kernel. The problem is that intel-ucode and initramfs resides on /boot, which is an unencrypted fat32 ESP filesytem - UEFI specific. How can I secure my ...
dzervas's user avatar
  • 363
5 votes
2 answers
4k views

Multiple VLAN's - Multiple SSID or Single SSID and Multiple VLAN's (radius)

I have a question regarding best practice. I have a case where i need multiple VLAN's in wireless networks. What is more performant? Having multiple SSID and each of them have a VLAN (this also mean ...
George Farcas's user avatar
0 votes
1 answer
2k views

Samba using homes share with an encrypted directory

Originally Posted on SuperUser but realized it should be posted here. I have a Samba fileserver that I set up to access my files over a VPN connection to my house. I configured my VPN client to ...
Todd Danko's user avatar
2 votes
2 answers
5k views

How to enable SAMBA encryption and do not require user authentication

I have a perfectly working SAMBA (version 4.3.11) share hosted on ubuntu. SAMBA shares are open to ANY user (local intranet) As soon as I added encryption settings, traffic is encrypted BUT all of ...
Chicago's user avatar
  • 155
0 votes
1 answer
78 views

AWS: encrypted ROOT EBS doesn't support t2 instance types

I created an AMI from my web server. Then I copied the snapshot, checking the "encrypted" checkbox. Then I created an AMI from this encrypted snapshot. Then I tried to launch a new instance from this ...
AussieDude's user avatar
1 vote
2 answers
92 views

Does Mediawiki encrypt logins by default as the browser sends them to the server?

Several searches only turned up questions about encrypting login info on the server side. Does Mediawiki encrypt logins after you type them in the browser and send them? (to prevent a man-in-the-...
user1258361's user avatar
0 votes
1 answer
189 views

Fresh Install Linux with Encryption won't boot

I having a problem whereby after I fresh install Debian and enable encryption (Encrypted LVM), it won't boot into the OS, just seeing a black screen. For a test, I also installed Debian without ...
rwcommand's user avatar
  • 163
1 vote
1 answer
77 views

Can a non-privileged user identify if Office 365 forces TLS encryption with a partner organization?

Exchange Online uses opportunistic TLS which works as follows: By default, Exchange Online always uses opportunistic TLS. This means Exchange Online always tries to encrypt connections with the ...
John Eisbrener's user avatar
0 votes
1 answer
173 views

Determining which Ciphers clients are using from RoundCube mail

I have RoundCube installed on RHEL 7 server, and after Qualys vuln check, there are some vulnerabilities with ciphers. After patching, DES & 3DES cannot be used anymore. TLS handshakes cannot be ...
user avatar
1 vote
1 answer
207 views

Windows Server 2008 R2 - Cryptographic Operators group issue

I have a problem similar to this question: Windows 7 “Cryptographic Operators”. I am attempting to add a cryptographic rule. When I get to the step to set the cryptographic algorithms I get an "...
user4616559's user avatar
0 votes
2 answers
546 views

Lets encrypt with lighttpd and wordpress

I am trying to implement let's encrypt with certbot and I am using lighttpd on CentOS 6 So this is my full conf file for my host $SERVER["socket"] == ":443" { ssl.engine = "enable" ssl.pemfile = ...
madeye's user avatar
  • 103
0 votes
1 answer
141 views

Server hangs when trying to boot after trying to encrypt /tmp in centos 6.9

I am trying to encrypt the /tmp partition on a server after it had been configured. I wasn't able to setup up encrypt at install as it wouldn't allow for using a random key. Instead, I created the /...
user430206's user avatar
0 votes
2 answers
2k views

What's the benefit of having a two-tier PKI heirarchy?

According to the way I read the literature, a two-tier PKI heirarchy with an offline root CA provides redundancy and an extra layer of security in case your subordinate CA's private key gets ...
Wes Sayeed's user avatar
  • 1,922
4 votes
1 answer
1k views

Encrypt disks using SED and store keys in TPM?

I'm buying servers lately and all of them have disks that support TCG Opal full-disk encryption (aka SED). What I'd like to do is: Store data encrypted-at-rest on the disks (NVMe & SAS). Not be ...
Evan's user avatar
  • 497
0 votes
1 answer
177 views

Implications of turning on bitlocker on a server

I have a server which contains some sensitive data and I feel like I should have bitlocker enabled on it. The problem is that the server has many floating licenses installed on it which the PCs on the ...
Abhishek Agarwal's user avatar
4 votes
4 answers
1k views

What could cause a 'sense error' when setting LTO encryption?

I'm trying to set an encryption key on an LTO-4 drive under Linux. I successfully did this once, power cycled the drive, and now I cannot get the drive to accept the key again. The command I am ...
Malvineous's user avatar
  • 1,145
0 votes
3 answers
13k views

Windows 10 won't connect to RRAS VPN

Studying MCSA, currently working on a Server 2012 R2 server lab I have set up on a custom built computer. Current configuration, I have a host computer that is just that, a host, with RRAS installed ...
Zach85's user avatar
  • 19
2 votes
3 answers
2k views

Offsite Incremental Encrypted Backups for a small law office [closed]

I am the system administrator for a small law office. We have a local file server on our network that holds all of our digital records. The server is running Windows 8, but uses Cygwin. I currently ...
JoshuaD's user avatar
  • 225
1 vote
2 answers
8k views

Status of reversible encryption password [closed]

Is there an easy way to check Windows 2008R2 DC user accounts for a flag or keying material that shows that an account currently has a reversible password stored? I'm aware of DSInternals but I'm not ...
melds's user avatar
  • 231
1 vote
0 answers
46 views

Dovecot Mailbox Encryption (Scrambler) - pem_lib.c fails to handle key

In addition to following post, Dovecot ran into problems while reading the public key from the DB: Error: scrambler_pem_read_public_key: 139640300201616:error:0906D06C:PEM routines:PEM_read_bio:no ...
Linz's user avatar
  • 13
1 vote
2 answers
1k views

Is it possible to encrypt 'data in use' in Windows Server?

Data can have 3 states (in transit, in use and at rest). I know that for Windows Server, common methods of encryption are: In Transit = IPSEC In Use = ??? At Rest = BitLocker Is it possible to ...
Techboy's user avatar
  • 1,582
1 vote
1 answer
852 views

Unable to mount borg backup repository residing on a ZFS snapshot

I've posted the question and my own solution to this problem, to make it available to others. This relates to borg backup and was posted to this borg github issue: Allow check on read-only ...
zoot's user avatar
  • 267
1 vote
1 answer
867 views

Postgres Data Encryption Using LUKS with dm-crypt

We have encrypted volume using LUKS. cryptsetup luksOpen /root/test1 volume1 and mounted on mount /dev/mapper/volume1 /mnt/files We created postgres data directory inside /mnt/files and able to ...
user50442's user avatar
  • 241
0 votes
0 answers
772 views

Use encrypted eyaml data from puppet file?

I'm storing some sensitive data using eyaml. I have the encryption part working and integrated into my Hiera setup but I'm not sure how to unencrypt from within a puppet file. When I run the ...
Philip Kirkbride's user avatar
1 vote
1 answer
2k views

Pure-ftpd with MySQL - Crypt() not logging me in with hashed passwords

I am using pure-ftpd with mysql to auth users. Here is my mysql.conf MYSQLServer localhost MYSQLPort 3306 MYSQLSocket /var/run/mysqld/mysqld.sock MYSQLUser user MYSQLPassword ...
ServerSideSkittles's user avatar
1 vote
2 answers
10k views

Encrypting guest VM ESXI 6.5 with Bitlocker

Hi we're devs playing around with ESXI on some old R710s. For our dev enviromnment it will be fine. The R710 have a TPM. I tried encrypting the VM with Bitlocker but it couldn't see the TPM. I assume ...
user1102550's user avatar
1 vote
0 answers
215 views

GRUB "USB lock" for Linux Full Disk Encryption

Hy everyone. I'm investigating the possibility of using something like USB hardware locking dongles (like these ones used for software locking and licensing) to provide the key that Grub asks for ...
André Maricato's user avatar

1 2 3
4
5
16