<div>
Are you talking efs, you have to look and implement backups of feats, key recovery agent, setup that gets users to backup their certs.<br />
<br />
To meet regulatory requirements if present.<br />
<br />
Physical, VM shoukd not make a difference.<br />
<br />
Personal or shared encrypted data?
</div>


Are you talking efs, you have to look and implement backups of feats, key recovery agent, setup that gets users to backup their certs.

To meet regulatory requirements if present.

Physical, VM shoukd not make a difference.

Personal or shared encrypted data?

<div>
Thanks for your reply.<br>Shared? The whole file server will be encrypted to ensure network shares on that folder stay protected. <br>I'm concerned about file responsiveness of encrypted files on a VM. Is that a valid concern?<br>Am I likely to see better file responsiveness of encrypted shares if the OS was on the physical machine?<br><br>&nbsp;
</div>


Thanks for your reply.
Shared? The whole file server will be encrypted to ensure network shares on that folder stay protected.
I'm concerned about file responsiveness of encrypted files on a VM. Is that a valid concern?
Am I likely to see better file responsiveness of encrypted shares if the OS was on the physical machine?

 

Michael Ackerman

<div>
<div class="content wysiwyg-content">
I need to encrypt data at rest on a Windows 2016 file server. <br />
<br />
Am I correct in thinking it is best practice to use a physical server instead of a virtual server as the file server and encryption on the array controller would offer users better responsiveness than using a 3rd party encryption application like Sophos?<br />
<br />
What other pros/cons are there of using a physical or virtual server and array encryption or software encryption?
</div>
</div>


I need to encrypt data at rest on a Windows 2016 file server. 

Am I correct in thinking it is best practice to use a physical server instead of a virtual server as the file server and encryption on the array controller would offer users better responsiveness than using a 3rd party encryption application like Sophos?

What other pros/cons are there of using a physical or virtual server and array encryption or software encryption?

ENCRYPTING DATA AT REST ON A FILE SERVER

Encryption is the process of encoding messages or information in such a way that only authorized parties can read it. In an encryption scheme, the intended communication information or message, referred to as plaintext, is encrypted using an encryption algorithm, generating ciphertext that can only be read if decrypted. For technical reasons, an encryption scheme usually uses a pseudo-random encryption key generated by an algorithm. An authorized recipient can easily decrypt the message with the key provided by the originator to recipients, but not to unauthorized interceptors.

Encryption

Software is any set of instructions that directs a computer to perform specific tasks or operations. Computer software consists of programs, libraries and related non-executable data (such as documentation). Computer software is non-tangible, contrasted with computer hardware, which is the physical component of computers. Software written in a machine language is known as "machine code". However, in practice, software is usually written in high-level programming languages than machine language. High-level languages are translated into machine language using a compiler or interpreter or a combination of the two.

Software

Sophos develops products for communication endpoint, encryption, network security, email security and mobile security as well as unified threat management. Products include hardware (or software virtual appliance) network firewalls including web browsing protection, AntiSpam filters and antivirus protection, encryption and data protection, web filter, antispam and mobile content and device management tools.

Sophos

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.

Windows OS

Representational state transfer (REST) is an architectural style that gives a coordinated set of constraints to the design of components in a distributed hypermedia system used to design networked applications. RESTful systems typically communicate over Hypertext Transfer Protocol (HTTP) with the same HTTP verbs (GET, POST, PUT, DELETE, etc.) that web browsers use to retrieve web pages and to send data to remote servers. REST interfaces with external systems using resources identified by Uniform Resource Identifier (URI) that can be operated upon using standard verbs.