topic Content Encryption in Alfresco Archive

Content Encryption

sarathkumarpk — Thu, 21 Oct 2010 06:18:44 GMT

How can we encrypt content in alfresco to prevent viewing of data by system administrators without compromising lucene fulltext search and content transformation

Re: Content Encryption

mrogers — Thu, 21 Oct 2010 06:42:30 GMT

Someone asked the same question a while ago. You will find the discussion in these forums.

The bottom line is that you need to be able to trust your administrators.

Re: Content Encryption

ghernando — Thu, 21 Oct 2010 19:05:35 GMT

It would be nice to be able to have the data in alf_dat area encrypted to avoid OS greps and browsing of the data in the repository.
Is there some place in the code that might allow something like a Spring interceptor that would allow the data to be encrypted when written to alf_dat and decrypted when it is retrieved?
Or a direct change to the Java code.
Or is the read/write action to the repository not centralized to allow something like that?
If so, where is a good place to look in the code for this?
The application, preview, lucene index should be not affected.

Re: Content Encryption

flopez — Thu, 28 Oct 2010 22:06:18 GMT

Hi!

This post is rom 2008, now being 2010, does alfresco support data encryption on tranfer, and data encryption at rest such as 256-bit AES SSL?

Re: Content Encryption

klamerus — Sun, 30 Nov 2014 16:34:21 GMT

Anyone that feels it's sufficient to say you have to be able to trust your administrators doesn't understand the corporate world whatsoever. It's absolutely necessary these days with government backed (governments to be left unnamed) insiders planted in major companies that are required to have these employees to do business in these countries to have encrypted content. It's not just to block "administrators". Hackers exist within all companies (almost certainly even Alfresco) who are constantly looking for opportunities to take intellectual property. There has to be a mechanism to encrypt files at rest and the fact that all the major companies (OpenText, FileNet, Documentum, etc.) that store files at rest have these functionality demonstrates this.

Re: Content Encryption

mrogers — Mon, 01 Dec 2014 11:40:22 GMT

An encrypted content store is available for Alfresco Enterprise 4.2 and 5.0

http://docs.alfresco.com/5.0/concepts/encrypted-cs-home.html