Networks

Ask something
Question Locked

Windows Encryption

0 helpful
5 replies

by lowryda

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to provide a solution for a company that have the following issue:

They have documents maintained on a document control system. These files are stored on a server that is maintained provider by a service provider (like EDS). They would like the content of their document to be unreadable to EDS users who are administrators of the server that the files are maintained on.

If the files were encrypted by a user on the server will this ultimately prevent administrator from being able to transcribe the content of the documents or can administrator take control and decrypt the document. Any help greatly appreciated been a while since i have worked with encryption.

If anyone nows of a product that could meet my needs please dont hesistate to respond.

5 replies

by cg it

AES Advanced Encryption Standard, using a 128 bit encryption can have more than 300,000,000,000,000,000,000,000,000,000,000,000 key combinations. no key no data.

. (period)

by oh smeg

If they want to secure their Documents they need to control their own Data.

If they expect that it's possible to pay someone else to host the hardware and still maintain security they are engaged in [b]Wishful Thinking[/b] as no matter what they do they can not prevent the System Administrator from access their Documents.

The very idea of this defeats the reason that they are hiring an external source to host their data to begin with. It''s cheaper for them and they do not have to worry about Hardware Failure. If they are willing to accept the benefits they have to not only accept but tolerate the downside as well.

When they accepted the external Storage Solution they gave up any expectoration of Data Control or Security. ;)

Col

by lowryda

I have been doing a bit of research and am reading that there is the ability to make the user a data recovery agent and revoke the administrators data recovery agent certificate.
Has anyone tried this according to readings this would prevent the user from being able to decrypt the file but I assume that this would still allow the Administrator to backup the files.

Also I fully agree with comments regarding hosting alike. But this directive has been delivered so I suppose I have to work with this.

by oh smeg

I would have to wonder about the ability to recover from a hardware failure at the Hosters End or even a Software Failure at the Workstation end.

If the Data isn't overly Important you may get away with it but if it is I would be looking at only using the Hoster to Backup the Files and storing the rest locally. ;)

Col

This discussion is closed to new replies.