topic Re: Need clarifications on disk encryption in Application Networking

Need clarifications on disk encryption

tayyappa — Thu, 01 Jul 2010 14:06:38 GMT

Could you please clarify the following questions on disk encryption?

Whenever we enable/disable disk encryption, we are deleting all the cached data.

1. Why are we deleting all the DRE cache, when we enable/disable disk encryption? Instead we should encrypt/decrypt the data with the key that we got from CM. If we delete all the DRE cache, then we will lose the compression that we got from the DRE cache.

2. How can I verify that the files in the disk are encrypted, after disk encryption is enabled?

Re: Need clarifications on disk encryption

Zach Seils — Thu, 01 Jul 2010 15:18:05 GMT

Hi Thenna,

The partitions we encrypt are some of the largest on the system. We wouldn't have enough disk space to have two copies (encrypted & decrypted) of those paritions.

For verification, you would have to remove the disk drives and mount them on another Linux-based system. We don't provide a way to browse the cache contents.

Regards,

Zach

Re: Need clarifications on disk encryption

tayyappa — Fri, 02 Jul 2010 08:54:31 GMT

Am not asking you to have two two copies (encrypted & decrypted) of paritions.

Insteadof deleting the paritions, you can encrypt the paritions. So that you will not lose the compression that you get from the DRE cache.

Re: Need clarifications on disk encryption

Zach Seils — Tue, 06 Jul 2010 13:19:32 GMT

If I am encrypting an existing (unencrypted) partition, I have to write the encrypted version of the partition somewhere on disk before I remove the unencrypted version. Likewise in reverse. We don't have the disk space to perform this operation.

Regards,

Zach