Topic: full disk encryption

[schweidj]

Hi

can anybody tell me if there is an install option for full disk encryption in SME Server 9.x?

Regards,
Joachim

[Stefano]

AFAIK no ATM

what are you thinking about? any hint? it could be a great improvement

[schweidj]

I use a esxi box so I can access the console on restart to enter the password on startup.
From my point of view it´s a knock-out criterion for some-server. I would never store sensible data on a non encrypted device.

[schweidj]

I use a esxi box so I can access the console on restart to enter the password on startup.
From my point of view it´s a knock-out criterion for sme-server. I would never store sensible data on a non encrypted device.

[Daniel B.]

You can use the graphical installation menu with which you have all the centos partitioning options. Encryption should work (I have not tested). I should also add that full disk encryption on a 24/7 powered server is nearly useless (unless it's not physically protected)

[brianr]

You can use the graphical installation menu with which you have all the centos partitioning options. Encryption should work (I have not tested). I should also add that full disk encryption on a 24/7 powered server is nearly useless (unless it's not physically protected)

I can see partly what you mean here, but I think a link or paragraph explaining this point would be very instructive.

[Daniel B.]

Well, that's easy: once you entered the password to unlock the drive, the data is available just as if it was unencrypted for as long as the server stay powered on. The only protection it brings is if someone physically takes your server (or the image disk if it's a VM)

[schweidj]

Of course that´s what I mean, it´s protected if someone steals the hardware.

Thank you, I´ll try the graphical installation menu...

Joe

[brianr]

Of course that´s what I mean, it´s protected if someone steals the hardware.

Thank you, I´ll try the graphical installation menu...

Joe

Please keep us up to date with your progress, I am also interested in this..

[CharlieBrady]

once you entered the password to unlock the drive, the data is available just as if it was unencrypted for as long as the server stay powered on.

A corollary is that if the system reboots, and you are not physically present to enter the password, then the system is unusable.