topic Re: Alfresco 4 How to use alfresco repository encryption in Alfresco Archive

Alfresco 4 How to use alfresco repository encryption

amer_ezahir — Thu, 01 Mar 2012 15:01:21 GMT

Hi every bodyI wanna crypt documents on my alfresco 4 (community) using alfresco repository encryption but i don't know how to do itI have read the wiki : http://wiki.alfresco.com/wiki/Data_Encryptionwhat i need is just a sample to how activate this encryption for documents :roll: many thanks to an

Re: Alfresco 4 How to use alfresco repository encryption

mrogers — Thu, 01 Mar 2012 15:37:25 GMT

What are you trying to do and why?

Re: Alfresco 4 How to use alfresco repository encryption

amer_ezahir — Thu, 01 Mar 2012 15:43:49 GMT

Hi mrogers,

I try to encrypt some documents on some spaces…or a whole space to guarantee confidentiality of documents.

Re: Alfresco 4 How to use alfresco repository encryption

mrogers — Thu, 01 Mar 2012 16:29:46 GMT

What the encryption does is to provide encrypted properties.

There is no need to encrypt the content store since it should be protected by O.S. permissions. And Alfresco itself will secure access to documents depending on ACL for any external access. Documents going "over the wire" should be encrypted with SSL if you are worried about that.

Re: Alfresco 4 How to use alfresco repository encryption

amer_ezahir — Thu, 01 Mar 2012 16:34:54 GMT

As you know the administrator have the fall access to Alfresco,
the idea is that in spite of some body has access to a space tha he shoud'nt has, he can't read the content of the file because it's crypted :?

Re: Alfresco 4 How to use alfresco repository encryption

mrogers — Thu, 01 Mar 2012 17:21:41 GMT

So encrypt your document before storing documents in Alfresco. But you won't be able to index the content.

You should first look at setting up the correct access control. Using encryption instead is probably a poor choice.

Re: Alfresco 4 How to use alfresco repository encryption

amer_ezahir — Thu, 01 Mar 2012 22:09:13 GMT

you advice me to encrypt documents before upload it to alfresco respository !!
so for what is-it the Alfresco Data Encryption that this wiki talk about please ?:
http://wiki.alfresco.com/wiki/Data_Encryption

Re: Alfresco 4 How to use alfresco repository encryption

mrogers — Thu, 01 Mar 2012 22:44:03 GMT

As I said above it's for encrypted properties.

Re: Alfresco 4 How to use alfresco repository encryption

amer_ezahir — Thu, 01 Mar 2012 22:47:27 GMT

ops: i don't understand, would you please explain to me 😉

Re: Alfresco 4 How to use alfresco repository encryption

nirvanvjain — Tue, 05 Jun 2012 11:21:17 GMT

Hi Folks,

I went through the Wiki and also littlet bit familiar with the Encryption and its certification.

Now My worry is how to use/access the d:encrypted property through JAVA/JAVASCRIPT/WebService APIs ?

Please guide.

Thanks!
-Nirvan

Re: Alfresco 4 How to use alfresco repository encryption

ajithkumar97 — Wed, 09 Jan 2013 12:29:58 GMT

Hi,

We have implemented encryption mechanism for uploading documents to alfresco. While uploading docs, a custom rule will be executed, and content is encrypted and uploaded into alfreco repository. While downloading docs we are decrypt the same.

Thanks
Ajithkumar

Re: Alfresco 4 How to use alfresco repository encryption

sisao — Thu, 28 Feb 2013 16:44:27 GMT

Hi,

i'd say there are several reasons to encrypted the content store of alfresco, without being limited to properties, starting from specific security standards to privacy reasons. ACLs you'll teach me are just one random and mandatory security controls over a huge list. Specially in the produciton environemnt where sensitive data is stored. What if the disk containing the content store is breached or physically stolen? Assuming i have not yet a clear idea of what's the benefit of encrypting properties rather than the content itself as i've just started looking at encryption within alfresco, i definitely disagree with that. Encryption is neede during, storage, transportation and processing of data, not only in one of those 3 cases. As i am protecting sensitive data through alfresco this statement might scare me and convince me to chose other options. Fortunately i love your technology and i'll hopefully be able to provide encryption to the stored content in a different manner.

All the best,
Sisao.

Re: Alfresco 4 How to use alfresco repository encryption

ttownsend — Sun, 10 Mar 2013 13:01:56 GMT

Hi Sisao,

I, too, am a security specialist and have a strong interest in seeing cryptographic capabilities added in some way to security an Alfresco repository.
Are you going to work on a repository encryption solution for Alfresco? If so, I'd appreciate an opportunity to help develop some use cases and requirements.

Cheers,
Trevor

Re: Alfresco 4 How to use alfresco repository encryption

mrogers — Mon, 11 Mar 2013 13:47:19 GMT

This topic was originally about encrypted properties.

There are a few implementations of encrypted content stores. For example Alfresco Cloud has an encrypted content store.

Re: Alfresco 4 How to use alfresco repository encryption

nannasin28 — Tue, 12 Mar 2013 09:29:51 GMT

you won't be able to index the content.

Re: Alfresco 4 How to use alfresco repository encryption

vadi — Tue, 18 Nov 2014 18:40:41 GMT

we have come up with a solution to encrypt data at rest.Email me if you are interested with the solution.

Re: Alfresco 4 How to use alfresco repository encryption

klamerus — Sun, 30 Nov 2014 16:26:57 GMT

This topic was not originally about encrypted properties. It was about encrypting documents.

Re: Alfresco 4 How to use alfresco repository encryption

mrogers — Mon, 01 Dec 2014 11:43:23 GMT

Alfresco Enterprise 5.0 has an optional encrypted content store. http://docs.alfresco.com/5.0/concepts/encrypted-cs-home.html

The wiki page referenced in the original post (http://wiki.alfresco.com/wiki/Data_Encryption) is for encrypted properties.

Re: Alfresco 4 How to use alfresco repository encryption

sanketmohite — Mon, 24 Jul 2017 09:34:01 GMT

hi, I want to understand your solution. Can you email me same on sanket.s.mohite@gmail.com or provide your email address for further communication