Monday, April 29, 2024
 Popular · Latest · Hot · Upcoming
8
rated 0 times [  8] [ 0]  / answers: 1 / hits: 4440  / 2 Years ago, wed, january 5, 2022, 10:05:53

I have set up our new server at work to have an encrypted HDD. At start up it asks for our password before booting. Great. Except it has just dawned on me that we ssh in to the server all the time. What if I need to restart the machine remotely or the power goes out over the weekend.



Is there a way around this? I would still like to have the entire disk encrypted.



Thanks


More From » encryption

 Answers
6

There is no safe way around this.



Either you:




  1. Enter the password automatically. Thus negating the security.

  2. Or you manually enter it at boot.

  3. Or you manually enter it after booting a small unencrypted partition.



The last allows you to boot a minimal system into which you can SSH and then manually mount the partitions with protected data, but it also weakens the security because people can compromise this unencrypted part and wait for you to enter the encryption password.



If your server is equipped with a remote management feature (E.g. Dells DRAC, HP ILO etc) and that is on a secure network then you can also consider using that to remotely grab the console and enter the password (A sort of remote option 2). That assumes you trust the remote management features and network.


[#31992] Friday, January 7, 2022, 2 Years  [reply] [flag answer]
Only authorized users can answer the question. Please sign in first, or register a free account.
amacal

Total Points: 457
Total Questions: 102
Total Answers: 116

Location: Thailand
Member since Thu, Apr 22, 2021
3 Years ago
;