Alfresco 4 How to use alfresco repository encryption

[amer_ezahir]

Hi every body

I wanna crypt documents on my alfresco 4 (community) using alfresco repository encryption but i don't know how to do it

I have read the wiki : http://wiki.alfresco.com/wiki/Data_Encryption

what i need is just a sample to how activate this encryption for documents  :roll:

many thanks to any idea  :roll:

Best regards

[mrogers]

What are you trying to do and why?

[amer_ezahir]

Hi mrogers,

I try to encrypt some documents on some spaces…or a whole space to guarantee confidentiality of documents.

[mrogers]

What the encryption does is to provide encrypted properties.   

There is no need to encrypt the content store since it should be protected by O.S. permissions.    And Alfresco itself will secure access to documents depending on ACL for any external access.      Documents going "over the wire" should be encrypted with SSL if you are worried about that.

[sisao]

Hi,

i'd say there are several reasons to encrypted the content store of alfresco, without being limited to properties, starting from specific security standards to privacy reasons. ACLs you'll teach me are just one random and mandatory security controls over a huge list. Specially in the produciton environemnt where sensitive data is stored. What if the disk containing the content store is breached or physically stolen? Assuming i have not yet a clear idea of what's the benefit of encrypting properties rather than the content itself as i've just started looking at encryption within alfresco, i definitely disagree with that. Encryption is neede during, storage, transportation and processing of data, not only in one of those 3 cases. As i am protecting sensitive data through alfresco this statement might scare me and convince me to chose other options. Fortunately i love your technology and i'll hopefully be able to provide encryption to the stored content in a different manner.

All the best,
Sisao.

[ttownsend]

Hi Sisao,

I, too, am a security specialist and have a strong interest in seeing cryptographic capabilities added in some way to security an Alfresco repository.
Are you going to work on a repository encryption solution for Alfresco?  If so, I'd appreciate an opportunity to help develop some use cases and requirements.

Cheers,
Trevor

[amer_ezahir]

As you know the administrator have the fall access to Alfresco,
the idea is that in spite of some body has access to a space tha he shoud'nt has, he can't read the content of the file because it's crypted  :?

[mrogers]

So encrypt your document before storing documents in Alfresco.    But you won't be able to index the content.

You should first look at setting up the correct access control.    Using encryption instead is probably a poor choice.

[amer_ezahir]

you advice me to encrypt documents before upload it to alfresco respository !!
so for what is-it the Alfresco Data Encryption that this wiki talk about please ?:
http://wiki.alfresco.com/wiki/Data_Encryption

[mrogers]

As I said above it's for encrypted properties.