Topic: Protect/encrypt a SME server HD ?

[Reinhold]

Friends operate a pc based training system with a win/samba server domain.
They have expanded to 'onsite training' meaning they take their network to the client.

Now their system operates in an "almost public" place for days
and all their work is on an unprotected server on "unsafe territory".
They are looking for a method how to "completely encrypt the harddisk"
so that any thief "will only steal a useless (backupped) disk" ...

Has anybody installed such software (encfs or whatever)
successfully on SME 7.2 and is willing to share a success story ?


Regards
Reinhold



Note: Their current method of "pulling the HDs and taking it with them"
has resulted in transport-damaged HD's and "almost gotten stolen in the hotel" ...

[warren]

Reinhold

Just an idea; if the info is in an ibay on theserver, could you not use PGP to create a PGPdisk volume ?

[Reinhold]

Thanks for sharing the idea warren!
Actually (since they use a windoze server now anyway <eg>) we have been talking about the now commercial software offerings of pgpinternational ... which btw are for Win and Mac ... Also Win-XP & Server have encryption already in the package (as you might know)

The beauty of SME however is that "it's all in one box" and rather easy to maintain. (which we know  )
SME completely "theft-proof-protected", would be a single system serving everything on the road and "at the home office too"
with close to no modification - no need to sync or whatever - just plug in and continue 'to play'.
With flatrate UMTS that could possibly even include a mail package...
'New' stuff and modifications could be implemented "on offsite" - right away while away .

NO ONE TRIED ENCRYPTED SME YET ?

Regards












 

[raem]

Reinhold

Lodge a new feature request on bugzilla, and see if the devs have any comments/suggestions.

[thomasch]

Has anybody installed such software (encfs or whatever)
successfully on SME 7.2 and is willing to share a success story ?

Your best bet now is a HDD hardware encryption.
Maybe this link can help you :
http://news.softpedia.com/news/Giant-Notebook-Drives-And-Full-Hardware-Encryption-For-Desktops-65056.shtml

If not, Google is your best friend

[kruhm]

I have POINTSEC running on some laptops.

[7eis]

While not being the best solution, using a fully encrypted minimal <whatever> with vmware on top should do the job.
Many distributions can encrypt the entire LVM (if that's what you want) when installing the dist. Debian should do fine.

I believe xen gives better performance (more transparent), but as I have no actual experience with xen, I cant tell if encrypting (with their native 'xen OS') is a easy thing to do.