Re: Disk level encryption

From: Mike Epprecht \(SQL MVP\) (mike_at_epprecht.net)
Date: 07/13/05

  • Next message: Alex: "Limit application access via integrated security" 
    Date: Wed, 13 Jul 2005 20:26:24 +0200

    Hi

    Ask the vendor if they support SQL Server on it.

    Any reason why you want to encrypt the disk? If a user with the correct
    permissions copies the DB off that disk, your data is open. Your backup is
    open too.

    Rather encrypt the data in the application before you save it into the DB.
    Then only the application can get to it.

    Regards
    --------------------------------
    Mike Epprecht, Microsoft SQL Server MVP
    Zurich, Switzerland

    IM: mike@epprecht.net

    MVP Program: http://www.microsoft.com/mvp

    Blog: http://www.msmvps.com/epprecht/

    "The Poster" <nospam@nospam_dontyoudare.net> wrote in message
    news:%234TfDq7hFHA.1248@TK2MSFTNGP12.phx.gbl...
    > G/Day forum,
    >
    > I've been asked to find a disk level encryption software, that will be
    > installed on a Windows 2000 based file server, and basically encrypt
    > credit
    > card data thats
    > stored on disk. In this case EFS isn't sufficient.
    >
    > So far I've only looked at one product: NetLib Encryptionizer DE (
    > http://www.netlib.com/file-encryption.shtml ). Does anyone have any
    > opinions
    > on this product? Alternatives?
    >
    > Regards,
    > Steve.
    >
    >

  • Next message: Alex: "Limit application access via integrated security"

    Relevant Pages

    • Re: Is my idea can be implement?
      ... Not every sectors on the disk will be encrypted with my "WDE", such as the first cylinder of the disk which contain the MBR; ... The INT13 filter is implement reading and writting sectors in secure mode, and PCI's functions is to implement the driving of PCI card to do the encrypt and decrypt operations, these function will be called by my INT13 filter. ... The PCI driver will drive my PCI crypto card, and disk filter driver do the reading and writting disk sectors in a secure mode, they will "use" PCI device to do the encrypt and decrypt operations through PCI driver. ...
      (microsoft.public.development.device.drivers)
    • Re: GJournal (hopefully) final patches.
      ... For a couple of my smaller filesystems I reduced it to ... It seems like a reasonably modern controller and disk, ... The geom stack on my laptop currently looks something like this: ... rather than encrypt the journal). ...
      (freebsd-current)
    • Re: mlock(1)
      ... >>related to the swapsuspend encryption key on disk) is needed. ... >>usb pen to store and fetch the key... ... Encrypt _that_ with the passphrase or whatever, ...
      (Linux-Kernel)
    • Re: Fastest secure erasing of HDs?
      ... here is the fastest way to make sensitive data unreadable to ... Encrypt the drive using a "whole disk" encryption system, ... You need to encrypt the whole disk, not just your home directory, to be ... If it is just your home directory encrypted, you have to worry ...
      (comp.sys.mac.system)
    • Re: RFC: backporting GEOM to the 4.x branch
      ... >a very long time to re-encrypt the entire disk. ... I confess that I still don't see the threat model here. ... but wouldn't require replacing AES entirely. ... encrypt block B with master key K, ...
      (freebsd-hackers)
    • Quantcast