Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Will Safeguard Disk Encryption for Mac run on an OS X server, or only on a client OS?

I need to encrypt the boot drive on an Apple XServe running 10.6.8 Snow Leopard Server.  Does Safeguard Encryption install & run on that?  I can't find any info saying it does, but none saying it doesn't either.

Thanks for any help.

:23539


This thread was automatically locked due to age.
Parents
  • Question, what operations is the MAC OS X server doing that you require data encryption on the OS partition?  This isn't always a good idea on a server because it prevents rebooting and can cause issues with other types of management software and backups as well as system state restore or bare metal restore operations, and some anti-rootkit and sanity checking software for mac os x server may not like the altered startup method.  Is physical theft of a server or it's storage volumes a real possability for this operation?  If so maybe better physical security is the way to go.

    Also if you absolutely MUST have volume encryption my advice is to move any data, configs, etc, that you want protected that CAN be moved to a seperate volume and encrypt that instead and just mount the volume manually requiring your admin user password for SG6 after a reboot if you REALLY need that kind of security.  I don't see a reason why it shouldn't work but be warned that it may not install because it's a server and depending on how they did OS detection/rejection during install it, and you may not be able to get much if any support at all on this.  I haven't tried the install on an OS X server but yea there is extra considerations involved.

    :23551
Reply
  • Question, what operations is the MAC OS X server doing that you require data encryption on the OS partition?  This isn't always a good idea on a server because it prevents rebooting and can cause issues with other types of management software and backups as well as system state restore or bare metal restore operations, and some anti-rootkit and sanity checking software for mac os x server may not like the altered startup method.  Is physical theft of a server or it's storage volumes a real possability for this operation?  If so maybe better physical security is the way to go.

    Also if you absolutely MUST have volume encryption my advice is to move any data, configs, etc, that you want protected that CAN be moved to a seperate volume and encrypt that instead and just mount the volume manually requiring your admin user password for SG6 after a reboot if you REALLY need that kind of security.  I don't see a reason why it shouldn't work but be warned that it may not install because it's a server and depending on how they did OS detection/rejection during install it, and you may not be able to get much if any support at all on this.  I haven't tried the install on an OS X server but yea there is extra considerations involved.

    :23551
Children
No Data