encryption on drives questions

[hescominsoon]

hypothetical situation. You have encryption enabled on your storage drives. Obviously encrypting the boot drive is not normal procedure. Let's say somebody steals the entire server(which in SMB land is very real concern)...this means they have the boot drive and the storage drives.

1. I am assuming the encryption keys for the secured storage are kept on the boot volume?
2. If the above scenario happened...would the data be easily compromised?
3. Is the data on the storage drives still unreadable?

 

[fta]

hypothetical situation. You have encryption enabled on your storage drives. Obviously encrypting the boot drive is not normal procedure. Let's say somebody steals the entire server(which in SMB land is very real concern)...this means they have the boot drive and the storage drives.

1. I am assuming the encryption keys for the secured storage are kept on the boot volume?

They are.

2. If the above scenario happened...would the data be easily compromised?

It would.

3. Is the data on the storage drives still unreadable?

Yes, but your key could be used to decrypt it.

However, you can also set up the encryption to use the key *and* a password. If you do that, your key is still stored on the boot disk, but it is useless without the password.

 

[hescominsoon]

They are.



It would.



Yes, but your key could be used to decrypt it.

However, you can also set up the encryption to use the key *and* a password. If you do that, your key is still stored on the boot disk, but it is useless without the password.

This would necessitate entering the password on boot correct?
this is not an issue for my more security conscious clients.

 

[fta]

This would necessitate entering the password on boot correct?
this is not an issue for my more security conscious clients.

Correct. Every time the system is booted you have to manually (in the GUI) mount the volume with your password.

 

[hescominsoon]

good. Thanks..that makes things much clearer and allows me to move forward with my project..:)