Editing SFTP server synodex docgenix Disk Aes256 Encryption at Innodata

[[category:INNODATA]]


'''AES 256BIT DISK ENCRYPTION'''


Create a separate partition in my case /dev/sda6 and after encryption I will try to use this as /home


'''dd if=/dev/urandom of=/dev/sda6''' <nowiki>#will take some time to get completed</nowiki>

2.Initialize ur partition


'''cryptsetup -y -c aes -s 256 -h sha256 --verbose --verify-passphrase luksFormat /dev/sda6 # will asks to set the passphrase'''


'''3.''' Open the newly encrypted device


'''cryptsetup luksOpen /dev/sda6 home'''


4.create a filesystem 


'''mkfs.ext3 /dev/mapper/home'''


5.mount it


'''mount /dev/mapper/home /home'''


6.add the following to /etc/crypttab


home /dev/sda6 none #will prompt a password at the time of restart


8.add this entry to fstab file


'''/dev/mapper/home /home ext3 defaults 1 2'''


9.restore default SELinux security contexts


/sbin/restorecon -v -R /home


10.shutdown -r now # at the time of restart it will ask for the pass phrase for /dev/sda6