nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

Alfresco 4 How to use alfresco repository encryption

amer_ezahir

Hi every body

I wanna crypt documents on my alfresco 4 (community) using alfresco repository encryption but i don't know how to do it

I have read the wiki : http://wiki.alfresco.com/wiki/Data_Encryption

what i need is just a sample to how activate this encryption for documents :roll:

many thanks to any idea :roll:

Best regards

Find more posts tagged with

Comments

mrogers

What are you trying to do and why?

amer_ezahir

Hi mrogers,

I try to encrypt some documents on some spaces…or a whole space to guarantee confidentiality of documents.

mrogers

What the encryption does is to provide encrypted properties.

There is no need to encrypt the content store since it should be protected by O.S. permissions. And Alfresco itself will secure access to documents depending on ACL for any external access. Documents going "over the wire" should be encrypted with SSL if you are worried about that.

amer_ezahir

As you know the administrator have the fall access to Alfresco,
the idea is that in spite of some body has access to a space tha he shoud'nt has, he can't read the content of the file because it's crypted :?

mrogers

So encrypt your document before storing documents in Alfresco. But you won't be able to index the content.

You should first look at setting up the correct access control. Using encryption instead is probably a poor choice.

amer_ezahir

you advice me to encrypt documents before upload it to alfresco respository !!
so for what is-it the Alfresco Data Encryption that this wiki talk about please ?:
http://wiki.alfresco.com/wiki/Data_Encryption

mrogers

As I said above it's for encrypted properties.

amer_ezahir

ops: i don't understand, would you please explain to me 😉

nirvanvjain

Hi Folks,

I went through the Wiki and also littlet bit familiar with the Encryption and its certification.

Now My worry is how to use/access the d:encrypted property through JAVA/JAVASCRIPT/WebService APIs ?

Please guide.

Thanks!
-Nirvan

ajithkumar97

Hi,

We have implemented encryption mechanism for uploading documents to alfresco. While uploading docs, a custom rule will be executed, and content is encrypted and uploaded into alfreco repository. While downloading docs we are decrypt the same.

Thanks
Ajithkumar

sisao

Hi,

i'd say there are several reasons to encrypted the content store of alfresco, without being limited to properties, starting from specific security standards to privacy reasons. ACLs you'll teach me are just one random and mandatory security controls over a huge list. Specially in the produciton environemnt where sensitive data is stored. What if the disk containing the content store is breached or physically stolen? Assuming i have not yet a clear idea of what's the benefit of encrypting properties rather than the content itself as i've just started looking at encryption within alfresco, i definitely disagree with that. Encryption is neede during, storage, transportation and processing of data, not only in one of those 3 cases. As i am protecting sensitive data through alfresco this statement might scare me and convince me to chose other options. Fortunately i love your technology and i'll hopefully be able to provide encryption to the stored content in a different manner.

All the best,
Sisao.

ttownsend

Hi Sisao,

I, too, am a security specialist and have a strong interest in seeing cryptographic capabilities added in some way to security an Alfresco repository.
Are you going to work on a repository encryption solution for Alfresco? If so, I'd appreciate an opportunity to help develop some use cases and requirements.

Cheers,
Trevor

mrogers

This topic was originally about encrypted properties.

There are a few implementations of encrypted content stores. For example Alfresco Cloud has an encrypted content store.

nannasin28

you won't be able to index the content.

vadi

we have come up with a solution to encrypt data at rest.Email me if you are interested with the solution.

klamerus

This topic was not originally about encrypted properties. It was about encrypting documents.

mrogers

Alfresco Enterprise 5.0 has an optional encrypted content store. http://docs.alfresco.com/5.0/concepts/encrypted-cs-home.html

The wiki page referenced in the original post (http://wiki.alfresco.com/wiki/Data_Encryption) is for encrypted properties.

sanketmohite

hi, I want to understand your solution. Can you email me same on sanket.s.mohite@gmail.com or provide your email address for further communication