Deployment and Imaging Group

 View Only
  • 1.  Protect a .gho image with a password?

    Posted Mar 10, 2011 09:18 AM

    Is this an option in Ghost Solution Suite?



  • 2.  RE: Protect a .gho image with a password?



  • 3.  RE: Protect a .gho image with a password?

    Posted Mar 10, 2011 09:33 AM

    Or is it only in a different application like Nero, shown in link above?  I was looking for an option in Ghost, like a check box or a command line parameter I could use when capturing the image.

    Thanks



  • 4.  RE: Protect a .gho image with a password?

    Posted Mar 10, 2011 11:27 AM

    There is no built in encryption option. The image is already compressed to some extent, so encryption just presents a further opportunity for a small media error to make the image unrecoverable.

    Whatever encryption method you choose, you need to make sure it can survive minor errors and still allow the GHO file to be decrypted without any corruption.



  • 5.  RE: Protect a .gho image with a password?

    Posted Mar 10, 2011 12:26 PM

    -pwd, in older versions of Ghost Solution Suite, I take it that is not an option in 2.5.1?  I'm actually attempting this now to see what happens.  Thanks for the information.



  • 6.  RE: Protect a .gho image with a password?

    Posted Mar 10, 2011 03:52 PM

    Apologies - I somehow picked up encryption as your goal, rather than just applying a password. The -pwd switch should still be in there.



  • 7.  RE: Protect a .gho image with a password?
    Best Answer

    Posted Mar 10, 2011 04:37 PM

    This option exists in the product at all only because it is retained for backward compatibility with images created with very older versions (Ghost will still read images created well over a decade ago). However, even in 1997 when the switch was introduced, the implementation was sorely lacking from a security standpoint - as it happens, prior to my main involvement with Binary Research I was tasked with looking at this to review its security, by being given a pre-release binary to see if I could "break" it, and my emphatic recommendation was that it not be released as it was.

    Do not rely on this as a security feature; it is not. There is no direct support for this feature in the Ghost console system because this feature is not implemented to a suitable standard to provide effective security.