topic Re: Encryption options in Operating System - HP-UX

Encryption options

John Oberlander — Fri, 19 Jan 2007 14:05:05 GMT

My company has a new requirement for database/filesystem encryption and im looking for some options.

Our environment is RP-8420 HP-UX 11iv1---> Universe DB2 database--> cisco san --> EVA 5000.

I found a HP encryption card A5486A that might work. Has anyone had experience with this? We are suppose to use open standards like triple DES ect.

Better options would be an encrypted filesystem for 11iv1, but im not aware of any.

3rd option would be new vcs code for the eva that supports encrypted luns, but im not aware of that feature being available either.

Does anyone have anything like this implemented ?

Thanks in advance,
John Oberlander

Re: Encryption options

Jeff_Traigle — Fri, 19 Jan 2007 14:31:49 GMT

I don't know that we have that specific model since we have L-class boxes, but we do use encryption cards in a couple of systems. They won't meet your requirement. They are only encryption accelerators, taking the workload of encrypting/decrypting off the system CPU.

I found HP's web site for HP-UX 11i Encrypted Volume and File System service. First I've heard of it, but might give you what you need.

http://h20338.www2.hp.com/hpux11i/cache/324629-0-0-0-121.html

Re: Encryption options

Tim Nelson — Fri, 19 Jan 2007 14:43:32 GMT

http://www.vormetric.com/

Re: Encryption options

John Oberlander — Fri, 19 Jan 2007 14:52:24 GMT

Jeff,

I saw the evfs but its only for 11.21 not 11.11. :(

Tim,
Thanks for the link, ill check it out.

I can't believe theres not more options out there though.

Re: Encryption options

Tim Nelson — Fri, 19 Jan 2007 14:55:58 GMT

There was a company that has a inband FC packet encryptor. Cannot remember the name. It was really, really expensive, completely transparent ( even for the thief ), and required another appliance for backups.

Check out the Vormetric stuff. It was the only real solution I have seen ( nut not used ).

Enable encryption in the database/applicaiton and turn the problem over to those guys :)

Re: Encryption options

John Oberlander — Fri, 19 Jan 2007 15:05:40 GMT

Thanks, this vormetric seems to be targeting the PCI compliance which is the reason for our requirement.

DB2 has the encryption option now, but the programmers are complaining about performance issues from their tests.

John