Ciphering server hard drives ?

PlatinumX · 01-30-2009, 10:45 AM

Hey all,

I would like to cipher a part of a server hard drive containing sensitive information (private key and password).

However, i have a doubt.

Is it possible to cipher data of a server ?

I mean, i don't want a system admin to type a password on the server every time the server needs to restart.

So, is there a solution to have an autonomous (means not requiring human intervention at boot) ciphered server ?

Thanks

unSpawn · 01-30-2009, 03:35 PM

So where do you think the key should reside then? And what "protection" would storing the key in that form and location provide?

PlatinumX · 02-02-2009, 03:56 AM

Quote:

So where do you think the key should reside then?

This is excatly the point of my question.
I am not an encyclopedia. So there is maybe an alternative I don't know.
Therefore I ask.

unSpawn · 02-03-2009, 05:12 PM

It's like designing a missile bunker with the keys in the console, a cellphone that can be unlocked by pressing hardcoded two keys or requiring executable script obfuscation without relinquishing the key. I think in short the answer is "no"?

PlatinumX · 02-04-2009, 03:36 AM

Thanks

jschiwal · 02-04-2009, 05:42 AM

It's like designing a roadside sign where entering [SHIFT][CLTRL]DOT resets the default password "DOT".

PlatinumX · 04-17-2009, 08:34 AM

We forgot hardware autentication.
http://en.wikipedia.org/wiki/Full_Di...latform_Module

When using a motherboard embedding a TPM chip, you can link your hard-drive to this very chip.

Therefore, you don't need any human intervention to reboot a server.

Thanks anyway