Securely encrypting EV partition

[John_Santana]

Hi People,

Can anyone please suggest me what features or software that I can use to securely encrypt the EV Vault Store partition ?

I have SEP v 12.1.2 but I cannot see any way to encrypt it or somehwere in EV 9.0.4 itself.

[JesusWept3]

Can you not encrypt at the device level? Not really sure what the performance hit you'll get or from a support ability or a recovery standpoint

[Rob_Wilcox1]

Out f interest why do you want to? Do you encrypt the drives on your exchange servers?

[John_Santana]

Well this is for the PCI-DSS requirement which requires me to encrypt the EV and the Exchange Server drive as well, because Email might contains credit card sensitive data.

[Rob_Wilcox1 · Accepted solution]

Okay, I see.

Well, in answer to the question about whether the file system containing Vault Store data can be encrypted. I would say 'yes'.  It's just a file system. It should be transparent to EV, right? Of course you're going to impact performance to some extent and you'll need to figure out how to provide the data to backup software.

Did you look in the Compatibility Guide to see if there is mention of encryption software?

[John_Santana]

Rob,

Do you mean from this doco: http://www.symantec.com/business/support/index?page=content&id=TECH38537

I have searched the documentation and cannot see any encryption feature that is written in that document ?

[AndrewB]

John, you might want to have a look at PGP for your encryption requirements. it is also from Symantec.

[Rob_Wilcox1]

If there is nothing mentioned in the guide, then cautiously you're free to explore and use anything you encounter.. but you must your skill and get thoughts from us here (perhaps) as to whether the 'solution' sounds okay.

[John_Santana]

Andrew, does the PGP do the encryption like in WIndows Server BitLocker ?http://technet.microsoft.com/en-us/library/cc732725(v=ws.10).aspx

[AndrewB]

i dont know enough about it to compare to MS's solution. however, if BitLocker is like anything else, then I would expect there to be major differences between a feature of windows and a full blown enterprise encryption suite.

[John_Santana]

Yes, that is what I'm now confused and wondering if anyone here in the Symantec Forum has implemented BitLocker for the underlying EV Vaultstore.

[Rob_Wilcox1]

Is there anything else that you need with this issue?

[John_Santana]

No need Rob.

Thanks for the assistance guys...

[Rob_Wilcox1]

Glad to help,