Database Encryption

HCL Domino Domino Forum
1

Hi all,

i want to send certain .nsf for backup purposes to an other company. Naturally, i don’t want them to be able to acces the information in these .nsf …

especially in the file attachments …

If I use 'Locally encrypt this database using ’ with either low, medium or high encryption, will this work as the backup in not taken locally but from the sevrer ???

and if this work, does-it protect the file attachment also ??

Thanks

2

Subject: Database Encryption

It will work if you simply want to send or FTP the file. If you ever need to read the file again you’ll need the ID file that was used to encrypt it.

It will not work if you are using server-to-server replication. (The destination server will be unable to open the database because it is not encrypted with the destination server ID file).

3

Subject: RE: Database Encryption

does this mean that the .nsf file on the server is encrypted or is it simply the local replicas of the .nsf that are encrypted ??

4

Subject: RE: Database Encryption

The encryption is meant to be local replicas only, but you asked about sending an encrypted replica for offsite storage. If you send an encrypted replica, it cannot be accessed as a server-based NSF.

5

Subject: RE: Database Encryption

Hi again,

thanks for the responses !

just to clarify, here is the original question :

" If I use 'Locally encrypt this database using ’ with either low, medium or high encryption, will this work as the backup in not taken locally but from the sevrer ??? "

So let’ say there are no local replicas of the nsf, the backup system takes the .nsf file directly from the server. This is not a notes backup but a files system backup.

so, will my .nsf be encrypted ??

Thanks again!

6

Subject: RE: Database Encryption

No.

7

Subject: RE: Database Encryption

Gulp !

Not the answer i was hoping for !

Is there a solution ??

8

Subject: RE: Database Encryption

No, not really. If you encrypt the file (which is really nothing more than an OS copy) before sending it offsite, you can use just about any encryption package (PGP, etc.).

9

Subject: Database Encryption - it works

Remember that to a server, all files on it are local, so if you encrypt a file on the server, it will be encrypted with the current user id - the server’s id.

Try it. Hit the encryption settings button in the db properties of your server based mail file. When you click the Encrypt radio button, the dialog box will say Locally encrypt this database for: YourServerNameHere

This is perfect if you want to have your offsite backups encrypted. Each .nsf is encrypted on the tape and is not useable until you restore the file back to the server that it came from.

If you restore the file to a different server, the new server will not be able to open the file. This might catch you if you move an encrypted mail file from one server to another using and OS copy. Replicating the file to another server is OK because the host server has the keys and decrypts the data before it is sent to the new server. The new server will encrypt its replica with its own id.

Sorry this is so late, but maybe it will help somebody else.

10

Subject: Database Encryption

Locally encrypted databases must be accessed locally using tha id for which they are encrypted. Yes, attachments are encrypted within the database.