|
Home > Archive > MS SQL Server security > July 2005 > Disk level encryption
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Disk level encryption
|
|
| The Poster 2005-07-13, 9:23 am |
| G/Day forum,
I've been asked to find a disk level encryption software, that will be
installed on a Windows 2000 based file server, and basically encrypt credit
card data thats
stored on disk. In this case EFS isn't sufficient.
So far I've only looked at one product: NetLib Encryptionizer DE (
http://www.netlib.com/file-encryption.shtml ). Does anyone have any opinions
on this product? Alternatives?
Regards,
Steve.
| |
| Mark Randall 2005-07-13, 1:23 pm |
| PGP Disk with a 2048 bit key should do it.
--
- Mark Randall
http://zetech.swehli.com
"The Poster" < nospam@nospam_dontyo
udare.net> wrote in message
news:%234TfDq7hFHA.1248@TK2MSFTNGP12.phx.gbl...
> G/Day forum,
>
> I've been asked to find a disk level encryption software, that will be
> installed on a Windows 2000 based file server, and basically encrypt
> credit
> card data thats
> stored on disk. In this case EFS isn't sufficient.
>
> So far I've only looked at one product: NetLib Encryptionizer DE (
> http://www.netlib.com/file-encryption.shtml ). Does anyone have any
> opinions
> on this product? Alternatives?
>
> Regards,
> Steve.
>
>
| |
| Mike Epprecht \(SQL MVP\) 2005-07-13, 1:23 pm |
| Hi
Ask the vendor if they support SQL Server on it.
Any reason why you want to encrypt the disk? If a user with the correct
permissions copies the DB off that disk, your data is open. Your backup is
open too.
Rather encrypt the data in the application before you save it into the DB.
Then only the application can get to it.
Regards
--------------------------------
Mike Epprecht, Microsoft SQL Server MVP
Zurich, Switzerland
IM: mike@epprecht.net
MVP Program: http://www.microsoft.com/mvp
Blog: http://www.msmvps.com/epprecht/
"The Poster" < nospam@nospam_dontyo
udare.net> wrote in message
news:%234TfDq7hFHA.1248@TK2MSFTNGP12.phx.gbl...
> G/Day forum,
>
> I've been asked to find a disk level encryption software, that will be
> installed on a Windows 2000 based file server, and basically encrypt
> credit
> card data thats
> stored on disk. In this case EFS isn't sufficient.
>
> So far I've only looked at one product: NetLib Encryptionizer DE (
> http://www.netlib.com/file-encryption.shtml ). Does anyone have any
> opinions
> on this product? Alternatives?
>
> Regards,
> Steve.
>
>
| |
| The Poster 2005-07-15, 3:23 am |
| Hi Mike,
The reason I want to encrypt the contents of the disk (remember its a file
server not a database server) is because its a requirement for the PCI
Credit Card security standard.
NetLib seem to lead the way when it comes to providing encryption software,
and they understand the security standard.
Regards,
Steve.
"Mike Epprecht (SQL MVP)" <mike@epprecht.net> wrote in message
news:espnhh9hFHA.1444@TK2MSFTNGP10.phx.gbl...
> Hi
>
> Ask the vendor if they support SQL Server on it.
>
> Any reason why you want to encrypt the disk? If a user with the correct
> permissions copies the DB off that disk, your data is open. Your backup is
> open too.
>
> Rather encrypt the data in the application before you save it into the DB.
> Then only the application can get to it.
>
> Regards
> --------------------------------
> Mike Epprecht, Microsoft SQL Server MVP
> Zurich, Switzerland
>
> IM: mike@epprecht.net
>
> MVP Program: http://www.microsoft.com/mvp
>
> Blog: http://www.msmvps.com/epprecht/
>
> "The Poster" < nospam@nospam_dontyo
udare.net> wrote in message
> news:%234TfDq7hFHA.1248@TK2MSFTNGP12.phx.gbl...
>
>
| |
| heal my pc! 2005-07-15, 8:23 pm |
| Check out http://beyondifsolutions.com/html/catalog1.html
Excellent encryption, negligible processing overhead and affordable.
"The Poster" wrote:
> Hi Mike,
>
> The reason I want to encrypt the contents of the disk (remember its a file
> server not a database server) is because its a requirement for the PCI
> Credit Card security standard.
>
> NetLib seem to lead the way when it comes to providing encryption software,
> and they understand the security standard.
>
> Regards,
> Steve.
>
> "Mike Epprecht (SQL MVP)" <mike@epprecht.net> wrote in message
> news:espnhh9hFHA.1444@TK2MSFTNGP10.phx.gbl...
>
>
>
|
|
|
|
|