9d90 ZFS encryption/decryption using TPM PKCS#11 interface - The FreeBSD Forums
The FreeBSD Forums  

Go Back   The FreeBSD Forums > Base System > Storage

Storage Place to ask questions about partitioning, labelling, filesystems, encryption or anything else related to storage area.

Reply
 
Thread Tools Display Modes
  #1  
Old July 29th, 2012, 02:15
gkdydgh1 gkdydgh1 is offline
Junior Member
 
Join Date: Jul 2012
Posts: 1
Thanks: 0
Thanked 0 Times in 0 Posts
Default ZFS encryption/decryption using TPM PKCS#11 interface

Hi, I'm trying to encrypt/decrypt one of my disks using ZFS and I would like to use the keys stored in the TPM to do it. Is there anyway to do this?
Reply With Quote
  #2  
Old July 30th, 2012, 13:57
SirDice's Avatar
SirDice SirDice is offline
Moderator
 
Join Date: Nov 2008
Location: Rotterdam, Netherlands
Posts: 13,844
Thanks: 48
Thanked 2,060 Times in 1,890 Posts
Default

As far as I know ZFS on FreeBSD is still at version 28, which does not support encryption.
__________________
Senior UNIX Engineer at Unix Support Nederland
Experience is something you don't get until just after you need it.
Reply With Quote
  #3  
Old July 30th, 2012, 19:38
rajl rajl is offline
Junior Member
 
Join Date: Jan 2012
Posts: 17
Thanks: 3
Thanked 0 Times in 0 Posts
Default

ZFS on FreeBSD is indeed at version 28. ZFS does not support built-in encryption until version 30 or later (which are only available Solaris).

If you want to encrypt your ZFS partition(s), you can. However, you must use FreeBSD's Geom Framework tools to do so. There are numerous how-tos on the web and on these forums that cover how to do this.
Reply With Quote
Reply

Tags
tpm, zfs

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Last doubts on ZFS and encryption luckylinux Storage 4 July 6th, 2012 08:17
RX decryption attempted ForTozs System Hardware 0 June 18th, 2012 19:51
FreeBSD‘s ZFS can encryption/decryption support for datasets ? cougar General 5 July 19th, 2011 18:04
Binding Jail interface to Physical interface beaute Networking 1 August 18th, 2010 00:58
Network encryption or something like that... juve_inferno Networking 3 July 7th, 2009 18:41


All times are GMT +1. The time now is 06:07.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2013, vBulletin Solutions, Inc.
The mark FreeBSD is a registered trademark of The FreeBSD Foundation and is used by The FreeBSD Project with the permission of The FreeBSD Foundation.
Web protection and acceleration provided by CloudFlare
0