Endpoint Encryption

 View Only
  • 1.  Automating access to File Share Encryption

    Posted Aug 13, 2014 09:55 AM

    I'm working on a project replacing TrueCrypt-encryprted disk. The disk is shared on a file server and needs to be accessed by mutiple users including both interactive users and service users (scripts).

    One of the options I'm considring is to use Symantec File Share Encryption.

    Is there a way to automate access to Symantec FSE for a script? I'm specifcially concerned with the requirement to enter passphrase before access is allowed.

     

     



  • 2.  RE: Automating access to File Share Encryption

    Posted Aug 13, 2014 12:26 PM

    You can script adding people to shares and passphrases via the command line commands.

     

    http://www.symantec.com/docs/DOC6312



  • 3.  RE: Automating access to File Share Encryption

    Posted Aug 13, 2014 03:57 PM

    Thanks Alex_CST. I'm still a bit uneasy to use passphrase in a script or store it as an environment variable. Is there some kind of best practices document explaining how to handle passphrases for service users in a secure manner?

     



  • 4.  RE: Automating access to File Share Encryption

    Posted Aug 14, 2014 05:53 AM

    Not with regards to Symantec, but there are methods of doing so via PowerShell:

    https://www.interworks.com/blogs/trhymer/2013/07/08/powershell-how-encrypt-and-store-credentials-securely-use-automation-script

    http://dougg.co.nz/2012/09/11/powershell-scripting-using-secure-strings-for-encrypting-passwords/

    Just Google for ways of encrypting script passwords via PowerShell (assuming its Windows you're working with)