While I am certain all of you keep a close watch on all of IBM's
announcements, I thought I'd mention here that we announced encrypting
tape drives earlier this week.
They drives encrypt/decrypt data *in the drive itself tape speed*. The
performance penalty of host-based encryption is no longer necessary. ICSF
on z/OS can even act as the encrypted key store for the drive!
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to listserv@xxxxxxxxxxx with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
.
Re: Protecting sensitive files on a Windows file server ... The files will be encrypted on your file server but since the employee will have a key that is able to decrypt the files, he/she can then do whatever he wants with the file (e.g. copy to USB drive, burn to CD, etc.). ... If a user copies an encrypted file from the encrypted folder to a non-encrypted folder, the file will be saved unencrypted. ... I forgot to mention in my previous e-mail not to forget about encrypting the communication between the client's workstation and the file server using, for example, IPSec communications. ... Group Policies can disable USB drives, you can remove CD-R/RW drives, disable all attachments on your mail server, etc. ... (Security-Basics)
Re: Disk over writing software ...modern drives "auto-fix". ... on the block to a "spare" block reserved for this ... That's why I prefer encrypting my hard-disk instead of being concerned ... For SMART drives you've got smart tools,... (comp.os.linux.security)
Re: keep others out of my computer ... Having the fact we're encrypting drives... >> Admin would be the only user, ... Then I would create a backup admin account.... (microsoft.public.win2000.security)
Re: Cant view my own encrypted folders after re-format ... a reinstall is no help. ... log into it with the encrypting account with the password ... >>> drives are formatted NTFS. ... (microsoft.public.windowsxp.security_admin)
Re: IBM announces Encrypting tape drives ... Too bad that wasn't offloaded to zIIPs/zAAPs/zEEPs ("Enhanced Encryption Processor" - I just made that up) to generalize the support somehow. ... I'm not sure what the delays might be for opening a large number of small encrypted files once you get past the first one because I've completely lost track of how the drives to buffering and tape positioning these days. ...Offloading the CPU busy to a zAAP or zIIP would solve the CP busy problem but introduce another--you'd have to buy at least one zAAP/zIIP/zEEP/whatever to benefit from the offload, and you'd have to buy enough of them to sustain the maximum aggregate data rate you needed to meet your requirements without using up any CP cycles to maximize that benefit. ... while I don't have the numbers handy, my understanding is that a bunch of tape drives can simply sustain a significantly higher data rate with compression and encryption. ... (bit.listserv.ibm-main)
