Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Lauri Kiiski
> On 14 Aug 2019, at 22.37, Josh Fisher wrote: > > > On 8/14/2019 12:51 PM, Martin Simmons wrote: I think, though, that Lauri is referring to encrypt the metadata that is stored unencrypted in a disk volume by somehow encrypting the whole disk. >>> This is a main point! When

Re: [Bacula-users] Identify corrupted volume files

2019-08-14 Thread José Queiroz
Thanks for the response, Pedro and Heitor. Some of these volumes were recent, but most of them were historical, and were purged/pruned from the catalogs. Is there a way to verify them without using the catalogs? In fact, I only need to know if the volumes are consistent/readable. Em seg, 12 de

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Josh Fisher
On 8/14/2019 12:51 PM, Martin Simmons wrote: I think, though, that Lauri is referring to encrypt the metadata that is stored unencrypted in a disk volume by somehow encrypting the whole disk. This is a main point! When he encrypt the whole filesystem then it is useless (and time consuming) to

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Heitor Faria
> Hello Heitor, Hello Kern, > I recommend that you check the details of the BEE automatic encryption > feature. > If I am not mistaken you are referring to the new PSK (private shared key) > that > BEE uses for authentication. This means that Bacula will be much more secure > against

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Kern Sibbald
Hello Heitor, I recommend that you check the details of the BEE automatic encryption feature.  If I am not mistaken you are referring to the new PSK (private shared key) that BEE uses for authentication.  This means that Bacula will be much more secure against

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Martin Simmons
> On Wed, 14 Aug 2019 15:40:29 +0200, Radosław Korzeniewski said: > > > Hello, > > śr., 14 sie 2019 o 13:41 Josh Fisher napisał(a): > > > > > On 8/14/2019 6:22 AM, Radosław Korzeniewski wrote: > > > > Hello, > > > > niedz., 11 sie 2019 o 14:35 Lauri Kiiski napisał(a): > > > > > >> > >> -

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Martin Simmons
> On Wed, 14 Aug 2019 10:50:27 -0300 (BRT), Heitor Faria said: > > > >Also, this information needs to then travel the network connections in > > >the picture where it says File Attributes? I suppose I can then use > > >Bacula TLS > >>( [ >

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Heitor Faria
Hello Lauri (forgot to copy the group), > >Also, this information needs to then travel the network connections in > >the picture where it says File Attributes? I suppose I can then use > >Bacula TLS >>( [ >>https://www.bacula.org/5.2.x-manuals/en/main/main/Bacula_TLS_Communications.html >>|

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Radosław Korzeniewski
Hello, śr., 14 sie 2019 o 13:41 Josh Fisher napisał(a): > > On 8/14/2019 6:22 AM, Radosław Korzeniewski wrote: > > Hello, > > niedz., 11 sie 2019 o 14:35 Lauri Kiiski napisał(a): > > >> >> - Encrypt disks on the machines having these components: File Daemon, >> Director, Catalog, Storage

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Martin Simmons
> On Sun, 11 Aug 2019 15:33:11 +0300, Lauri Kiiski said: > > I would like to encrypt all my data while in transit and at rest. Where > unencrypted file metadata is stored? Data Encryption documentation > (https://www.bacula.org/5.2.x-manuals/en/main/main/Data_Encryption.html) > explains

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Martin Simmons
> On Wed, 14 Aug 2019 12:22:55 +0200, Radosław Korzeniewski said: > > > Is this metadata the File Attributes described at end of this page > > https://www.bacula.org/5.2.x-manuals/en/main/main/What_is_Bacula.html ? > > Is this file metadata then stored unencrypted at the following locations?

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Josh Fisher
On 8/14/2019 6:22 AM, Radosław Korzeniewski wrote: Hello, niedz., 11 sie 2019 o 14:35 Lauri Kiiski > napisał(a): - Encrypt disks on the machines having these components: File Daemon, Director, Catalog, Storage Daemon, Physical Media E, I do not

Re: [Bacula-users] Enrypting all data in transit and at rest

2019-08-14 Thread Radosław Korzeniewski
Hello, niedz., 11 sie 2019 o 14:35 Lauri Kiiski napisał(a): > I would like to encrypt all my data while in transit and at rest. Where > unencrypted file metadata is stored? Data Encryption documentation ( > https://www.bacula.org/5.2.x-manuals/en/main/main/Data_Encryption.html) > explains the