SFTP server synodex docgenix Disk Aes256 Encryption at Innodata

AES 256BIT DISK ENCRYPTION

Create a separate partition in my case /dev/sda6 and after encryption I will try to use this as /home

dd if=/dev/urandom of=/dev/sda6 #will take some time to get completed

2.Initialize ur partition

cryptsetup -y -c aes -s 256 -h sha256 --verbose --verify-passphrase luksFormat /dev/sda6 # will asks to set the passphrase

3. Open the newly encrypted device

cryptsetup luksOpen /dev/sda6 home

4.create a filesystem

mkfs.ext3 /dev/mapper/home

5.mount it

mount /dev/mapper/home /home

6.add the following to /etc/crypttab

home /dev/sda6 none #will prompt a password at the time of restart

8.add this entry to fstab file

/dev/mapper/home /home ext3 defaults 1 2

9.restore default SELinux security contexts

/sbin/restorecon -v -R /home

10.shutdown -r now # at the time of restart it will ask for the pass phrase for /dev/sda6