Filesystem Encryption for Linux - Introduction
1.0 Introduction
This article describes the Fortanix DSM Filesystem Encryption solution based on the open-source software Gocryptfs.
With this solution, Fortanix DSM protects and manages keys and policies that allow users to access the encrypted filesystem. The following are some of the benefits of this solution:
By leveraging the Fortanix DSM key management features, users get complete control over the key management for accessing the encrypted filesystem.
It eliminates the need to memorize complex passwords and reduces the chance of password exposure by providing native integration of an encrypted filesystem and Fortanix DSM.
By leveraging the policy management feature, users get to manage access to the encrypted filesystem.
Users can write fine-grained policies in Rego for Open Policy Agent (OPA) and manage them in Fortanix DSM.
Protect crypto keys and policy objects using Quorum policies on Fortanix DSM.
With DSM’s audit logging feature, every operation with the keys will be logged.
1.1 Fortanix Data Security Manager
Fortanix DSM is the cloud solution secured with Intel® SGX. With Fortanix DSM, you can securely generate, store, and use cryptographic keys and certificates, as well as secrets, such as passwords, API keys, tokens, or any blob of data.
2.0 References
For detailed information on the concept and setup, refer to the following: