ZFS Encryption in Solaris 10 06/06?
 

This new release will have the ZFS Encryption. Which means that partitions and drives can be encrypted.

But when installing this new release, what will I have to do during the partitioning part in order to use this ZFS Encryption scheme??? Esp. when dual-booting with Windows 2000?

And also, suppose I have a folder named "ACCOUNTING" that I will have sensitive data in that folder, so how would I implement the ZFS on that folder? How would I encrypt it?

I need this thread to be flowing please...I dont have that much time.

Thanks

AFAIK, it doesn't.
ZFS encryption is not available in Solaris 10 and is only an ongoing OpenSolaris project at this time.

So what does the release 6/06 mean then?? What advantages does that have? SO you mean I downloaded that for nothing???

Does that release will have more hardware support for the millionth time???

Already answered, please read the relevant posted link.
Same as the above.
I don't, unless the only feature you were expecting was zfs encryption.
Already answered the same number of times: yes it does (nor will, as it is released) support more h/w.

So just to confirm one more time...

The Solaris 10 Release 6/06 will have more hardware support? Espcecially for X86 PCs?

No, it already has more h/w support.

What do you mean by "NO"? Does it have more HArdware support than my current release of Solaris 10?

And ZFS...I am just reading on it. But during the installation partitioning part, will I get to choose ZFS, or will it automatically have the ZFS feature once I partition? And does ZFS has to do with securing folders and files or partitions? I dont understand fully.

thanks

I just meant your statement was gramatically incorrect.
You cannot use the future tense, which expresses an action or situation that will occur in the future, for something that is already a fact since more than a couple of weeks.
It has indeed.
No, you won't.
The root file-system still need to be UFS, so there is no change there.
The new feature is that you will be able to create zfs pools and filesystems from there on free slices, partition and/or disks.
Data integrity is one of the main zfs features.
You cannot have a silent file corruption with ZFS.

http://www.sun.com/software/solaris/...ing_center.jsp

jlliagre,

Thanks as always...You have been a great help...I actually downloaded the new release and I will install it who knows when...I will read the article more about it. And I am glad to that this new release will have more hardware support. Its about time.

ANd another thing, will this new release have the Trusted SOlaris extensions in it??

They are currently only available for Solaris Express.
http://www.opensolaris.org/os/commun...y/projects/tx/

WOW WOW WOW...Im excited by this already...But one problem...Can you please please please post the direct download of this please? And also, a few more questions regarding this....

1. Does this support the Intel X86 PCs or not??

2. Will the installation process be similar to the Solaris 10 that I first installed on my PC? In other words, will the installer have the same GUI installation like in the regular release of Solaris 10?

3. Can it dual-boot with Windows 2000? ( I dont think that I have to worry about this part, because I have System Commander)

4. And....WIll this be more Hardware friendlier as the Solaris 10 for X86??

Please....If all of the questions fits my needs...I may download this too...Just please post on where can I download this TRUSTED SOLARIS EXTENSION EXPRESS from...I already had registered so Im ready to download it onto a CD...NOT a DVD because SOlaris had trouble with my DVD ROM Drive....So please tell me where can I download this Trusted Express version of Solaris please...I always wanted a Trusted UNIX OS...

And last question - IS THIS FREE?? Or, do I have to pay for this? Is this expensive??

EDIT EDIT EDIT >>>>

OOOPS!!!! I just read the download/Installation page...Problemo....It says it needs to be BUILT!!!! Forget it...I thought it was like the regular version were you just installed and thats it...Ummmmm...I dont know...It looks hard if I have to compile or build it in order to install..

So where and how can I download this Trusted Extensions for Solaris? DO I need to build or comppile it in order for it to be installed?? Take a look at this. I really want to download this. But if I really have to build it, I will not mess with it since its complicated. I just want to keep things simple.
http://www.gcn.com/online/vol1_no1/37225-1.html

Of course it does.
It is an extension you add after installing Solaris.
I see no reason it won't, and anyway dual booting is supported out of the box without the need of system commander or whatever.
Can you elaborate about your H/W issues with Solaris ?
It looks to me all OpenSolaris projects are free.
I don't read that. The documentation says just to install some extra packages.
However, these packages are bundled with Solaris Express build 42a, which isn't yet available (current one is build 41).

Edit:
Correction, build 42a is in fact already available:
http://javashoplm.sun.com/ECom/docs/...nsactionId=try

I've started to use OpenSolaris on some PC's of mine recently. Now I want to encrypt my /home- and swap-partitions, just like I do on Mac OS X, Linux and *BSD.

Is there any way to do this? If not, it probably drives me away from Solaris to FreeBSD on these PC's. Sure, I can NFS-mount remote (encrypted) partitions from a Linux-PC and disable swap on Solaris, but for obvious reasons this is not a perfect solution for a heavily strained computer.

Therefore, I hope these is a way to encrypt hard drive under Solaris? Google didn't bring up anything useful.

This is a work in progress, have a look here:

http://www.opensolaris.org/os/project/zfs-crypto/
http://www.opensolaris.org/os/project/loficc/

I've been previously reading those pages and understood that it cannot be used yet. I was wondering, if there was some other encryption support (eg. Linux has many, loop-AES, dm-crypt and much more) available on Solaris.

But your reply cleared it to me now that I just have to wait. I find the lack of filesystem encryption very surprising, but at least there is some progress made.

I'm not aware of any strong demand for Solaris encrypted FS. AFAIK, these are recent things. Moreover encryption, being considered a weapon by the current US administration, is a tough issue for companies and projects based there.

OpenBSD is based on Canada for at least that reason: http://openbsd.org/crypto.html and I believe the FS you cite are all projects from elsewhere than the US.