Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Save more on your purchases! discount-offer-chevron-icon
Savings automatically calculated. No voucher code required.
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Oracle Solaris 11: First Look

You're reading from   Oracle Solaris 11: First Look A sneak peek at all the important new features and functionality of Oracle Solaris 11

Arrow left icon
Product type Paperback
Published in Jan 2013
Publisher Packt
ISBN-13 9781849688307
Length 168 pages
Edition 1st Edition
Languages
Arrow right icon
Author (1):
Arrow left icon
Philip P. Brown Philip P. Brown
Author Profile Icon Philip P. Brown
Philip P. Brown
Arrow right icon
View More author details
Toc

Table of Contents (19) Chapters Close

Oracle Solaris 11: First Look
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
1. IPS – The Image Packaging System FREE CHAPTER 2. Solaris 11 Installation Methods 3. Sysadmin Configuration Differences 4. Networking Nuts and Bolts 5. NWAM – Networking Auto-reconfiguration 6. ZFS – Now You Can't Ignore It! 7. Zones in Solaris 11 8. Security Improvements 9. Miscellaneous IPS Package Reference
New ACL Permissions and Abbreviations
Solaris 10 Available Enhancements Index

ZFS encryption


On-disk encryption of a ZFS filesystem is now possible in Solaris 11 as well as with the latest patch levels of Solaris 10. There is a fair amount of flexibility in the forms available. Key length can be 128-, 192-, or 256-bit AES which, similar to a PGP key is not directly editable. Instead, the admin controls access by use of a passphrase, which is referred to as a wrapping key. The key can be in the following forms:

  • Entered manually

  • Kept in plain-text form in a file

  • Kept in raw form in a file (even an automounted USB stick)

  • PKCS local Solaris keystore (can also leverage hardware crypto devices this way)

  • PKCS remote keystore (accessed via HTTPS)

The first form of directly inputting a key is the easiest to set up but is the most annoying to use on a true production system. The removable media option is good if your organization is big on the physical key style of security.

Keeping the key in a separate file can be more useful than it sounds, if you use zones. It is possible to...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image