Re: Disk level encryption

From: Mike Epprecht \(SQL MVP\) (mike_at_epprecht.net)
Date: 07/13/05 

Date: Wed, 13 Jul 2005 20:26:24 +0200

Hi

Ask the vendor if they support SQL Server on it.

Any reason why you want to encrypt the disk? If a user with the correct
permissions copies the DB off that disk, your data is open. Your backup is
open too.

Rather encrypt the data in the application before you save it into the DB.
Then only the application can get to it.

Regards
--------------------------------
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland

IM: mike@epprecht.net

MVP Program: http://www.microsoft.com/mvp

Blog: http://www.msmvps.com/epprecht/

"The Poster" <nospam@nospam_dontyoudare.net> wrote in message
news:%234TfDq7hFHA.1248@TK2MSFTNGP12.phx.gbl...
> G/Day forum,
>
> I've been asked to find a disk level encryption software, that will be
> installed on a Windows 2000 based file server, and basically encrypt
> credit
> card data thats
> stored on disk. In this case EFS isn't sufficient.
>
> So far I've only looked at one product: NetLib Encryptionizer DE (
> http://www.netlib.com/file-encryption.shtml ). Does anyone have any
> opinions
> on this product? Alternatives?
>
> Regards,
> Steve.
>
>

Relevant Pages

  • Re: Is my idea can be implement?
    ... Not every sectors on the disk will be encrypted with my "WDE", such as the first cylinder of the disk which contain the MBR; ... The INT13 filter is implement reading and writting sectors in secure mode, and PCI's functions is to implement the driving of PCI card to do the encrypt and decrypt operations, these function will be called by my INT13 filter. ... The PCI driver will drive my PCI crypto card, and disk filter driver do the reading and writting disk sectors in a secure mode, they will "use" PCI device to do the encrypt and decrypt operations through PCI driver. ...
    (microsoft.public.development.device.drivers)
  • Re: GJournal (hopefully) final patches.
    ... For a couple of my smaller filesystems I reduced it to ... It seems like a reasonably modern controller and disk, ... The geom stack on my laptop currently looks something like this: ... rather than encrypt the journal). ...
    (freebsd-current)
  • Re: Fastest secure erasing of HDs?
    ... here is the fastest way to make sensitive data unreadable to ... Encrypt the drive using a "whole disk" encryption system, ... You need to encrypt the whole disk, not just your home directory, to be ... If it is just your home directory encrypted, you have to worry ...
    (comp.sys.mac.system)
  • Re: mlock(1)
    ... >>related to the swapsuspend encryption key on disk) is needed. ... >>usb pen to store and fetch the key... ... Encrypt _that_ with the passphrase or whatever, ...
    (Linux-Kernel)
  • Re: RFC: backporting GEOM to the 4.x branch
    ... >a very long time to re-encrypt the entire disk. ... I confess that I still don't see the threat model here. ... but wouldn't require replacing AES entirely. ... encrypt block B with master key K, ...
    (freebsd-hackers)