encryption on drives questions

Status
Not open for further replies.

hescominsoon

Patron
Joined
Jul 27, 2016
Messages
456
hypothetical situation. You have encryption enabled on your storage drives. Obviously encrypting the boot drive is not normal procedure. Let's say somebody steals the entire server(which in SMB land is very real concern)...this means they have the boot drive and the storage drives.

1. I am assuming the encryption keys for the secured storage are kept on the boot volume?
2. If the above scenario happened...would the data be easily compromised?
3. Is the data on the storage drives still unreadable?
 

fta

Contributor
Joined
Apr 6, 2015
Messages
148
hypothetical situation. You have encryption enabled on your storage drives. Obviously encrypting the boot drive is not normal procedure. Let's say somebody steals the entire server(which in SMB land is very real concern)...this means they have the boot drive and the storage drives.

1. I am assuming the encryption keys for the secured storage are kept on the boot volume?

They are.

2. If the above scenario happened...would the data be easily compromised?

It would.

3. Is the data on the storage drives still unreadable?

Yes, but your key could be used to decrypt it.

However, you can also set up the encryption to use the key *and* a password. If you do that, your key is still stored on the boot disk, but it is useless without the password.
 

hescominsoon

Patron
Joined
Jul 27, 2016
Messages
456
They are.



It would.



Yes, but your key could be used to decrypt it.

However, you can also set up the encryption to use the key *and* a password. If you do that, your key is still stored on the boot disk, but it is useless without the password.

This would necessitate entering the password on boot correct?
this is not an issue for my more security conscious clients.
 

fta

Contributor
Joined
Apr 6, 2015
Messages
148
This would necessitate entering the password on boot correct?
this is not an issue for my more security conscious clients.

Correct. Every time the system is booted you have to manually (in the GUI) mount the volume with your password.
 

hescominsoon

Patron
Joined
Jul 27, 2016
Messages
456
good. Thanks..that makes things much clearer and allows me to move forward with my project..:)
 
Status
Not open for further replies.
Top