PDA

View Full Version : Encrypted backup of whole-disk encryption



Arthur T.
03-13-08, 10:50 AM
I have encrypted virtual disks. When I back up the OS files
that hold them, the backups are equally encrypted.

I've downloaded TrueCrypt. When I get brave enough, I'm
going to implement its whole-disk (or whole-partition) encryption.
Is there any reasonable way to back up the data so the backup is
encrypted? (Is there any *free* way to securely back up the
data?)

I'm running Win2K. I normally back up to DVD RW.

--
Arthur T. - ar23hur "at" intergate "dot" com
Looking for a z/OS (IBM mainframe) systems programmer position

Sebastian G.
03-13-08, 11:10 AM
Arthur T. wrote:

> I have encrypted virtual disks. When I back up the OS files
> that hold them, the backups are equally encrypted.
>
> I've downloaded TrueCrypt. When I get brave enough, I'm
> going to implement its whole-disk (or whole-partition) encryption.
> Is there any reasonable way to back up the data so the backup is
> encrypted? (Is there any *free* way to securely back up the
> data?)


1. trivial, obvious way: Use dd.exe or a more complex imaging software to
create an image of the raw disk, then burn it.

2. easier, more efficient way: Simply backup filewise from the running
system and encrypt the files

> I'm running Win2K.


Running a system with known unpatched vulnerabilities is something TrueCrypt
can't defend against.

Perjut
03-13-08, 05:32 PM
Arthur T. wrote:
> I have encrypted virtual disks. When I back up the OS files
> that hold them, the backups are equally encrypted.
>
> I've downloaded TrueCrypt. When I get brave enough, I'm
> going to implement its whole-disk (or whole-partition) encryption.
> Is there any reasonable way to back up the data so the backup is
> encrypted? (Is there any *free* way to securely back up the
> data?)
>
> I'm running Win2K. I normally back up to DVD RW.
>

It is quite complex and it needs quite a bit of time to learn, but
anyway, here it goes:

http://clonezilla.sourceforge.net/clonezilla-live/

Arthur T.
03-14-08, 05:54 PM
In Message-ID:<frc6io$lk0$1@news.mixmin.net>,
Perjut <perjut@no.spam> wrote:

>Arthur T. wrote:
>> I have encrypted virtual disks. When I back up the OS files
>> that hold them, the backups are equally encrypted.
>>
>> I've downloaded TrueCrypt. When I get brave enough, I'm
>> going to implement its whole-disk (or whole-partition) encryption.
>> Is there any reasonable way to back up the data so the backup is
>> encrypted? (Is there any *free* way to securely back up the
>> data?)
>>
>> I'm running Win2K. I normally back up to DVD RW.
>>
>
>It is quite complex and it needs quite a bit of time to learn, but
>anyway, here it goes:
>
>http://clonezilla.sourceforge.net/clonezilla-live/

Thank you. That looks like what I'd want. It's going to be
scary to test the restore, but, not as scary as using a new backup
program and *not* testing the restore. (It's also a good thing I
kept my C: partition at 4GB; it'll fit on a DVD.)

Thanks again for the link. I probably won't report back on
success or failure because it'll be a while.

--
Arthur T. - ar23hur "at" intergate "dot" com
Looking for a z/OS (IBM mainframe) systems programmer position

Arthur T.
03-18-08, 09:33 PM
In Message-ID:<frc6io$lk0$1@news.mixmin.net>,
Perjut <perjut@no.spam> wrote:

>Arthur T. wrote:
>> I have encrypted virtual disks. When I back up the OS files
>> that hold them, the backups are equally encrypted.
>>
>> I've downloaded TrueCrypt. When I get brave enough, I'm
>> going to implement its whole-disk (or whole-partition) encryption.
>> Is there any reasonable way to back up the data so the backup is
>> encrypted? (Is there any *free* way to securely back up the
>> data?)
>>
>> I'm running Win2K. I normally back up to DVD RW.
>>
>
>It is quite complex and it needs quite a bit of time to learn, but
>anyway, here it goes:
>
>http://clonezilla.sourceforge.net/clonezilla-live/

As it turns out, I probably will not be using that utility.
Truecrypt encryption of the OS partition does not support Win2K,
which is what I'm running. I don't expect to downgrade to XP or
Vista, nor do I expect Truecrypt to start supported "older" OSes.

--
Arthur T. - ar23hur "at" intergate "dot" com
Looking for a z/OS (IBM mainframe) systems programmer position

Sebastian G.
03-19-08, 12:04 AM
Arthur T. wrote:


> As it turns out, I probably will not be using that utility.
> Truecrypt encryption of the OS partition does not support Win2K,
> which is what I'm running.


It fully support Windows 2000 SP4 with the Update Rollup Package, and you
compile it for this platform yourself.

> I don't expect to downgrade to XP


Why should XP be a downgrade?