• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

Encryption

Anteaus

Platinum Member
I'm running Ubuntu 14.04.1 and have a couple questions about adding full disk encryption to some drives that will be mounting.

1. Since these drives are destined to be shared via Samba, will the encryption be transparent to other systems are will a shared key be required? Are the issues with Windows clients?

2. Presumably if my system drive dies my ability to read the encrypted drives go with it. Are the keys easy to backup and replace in the event I need to reinstall?

I have never dabbled in encryption and I worry about accidently blocking myself out of my own data. Are the security benefits worth the risk?

Thanks in advance.
 
1) Transparent.

2) Depends on the type of encryption used. Generally speaking yes. Self-encrypting drives don't even bother with that - you just put in a password at boot time.

3) Generally speaking, the security benefits are worth the risk - anybody who grabs your computer and runs will be unable to access the data on it. Which happens a lot, especially to laptops. For servers, IMO, good physical security is more important, but some industries require data to be stored encrypted. (Health Care, I think?)
 
1) Transparent.

2) Depends on the type of encryption used. Generally speaking yes. Self-encrypting drives don't even bother with that - you just put in a password at boot time.

3) Generally speaking, the security benefits are worth the risk - anybody who grabs your computer and runs will be unable to access the data on it. Which happens a lot, especially to laptops. For servers, IMO, good physical security is more important, but some industries require data to be stored encrypted. (Health Care, I think?)

Thank you for your answers. You guys have been very helpful with my threads. Now if I can just get my head around permissions and ACL I'll be good to go! It's easy to get spoiled with how Windows handles permissions. From my point of view, Windows let's everyone in unless you take steps to deny them whereas Linux won't let anyone in unless you take steps to allow them.

I have a test machine setup and I'm going through all the motions. I want to be ready for anything before I start migrating my server from Windows/NTFS to Linux/EXT4, especially when dealing with full disk encryption. 🙂
 
Back
Top