Security Basics mailing list archives

Re: PCI, EFS and the future?


From: "Saqib Ali" <docbook.xml () gmail com>
Date: Fri, 2 Feb 2007 14:13:41 -0800

My gut feeling is telling me that EFS is the wrong solution and I fear
that it won't be in compliance with PCI's data at rest specs.

May I ask why you feel that EFS is the wrong solution? On the face, it
seems to satisfy all the PCI data storage encryption requirements ....

I will tell you more why EFS might not be a good idea, but I want to
hear your opinion first.

Here is some white-papers (disclaimer: they are self-serving, but
still good) that cover data storage requirements for PCI.
http://www.neoscale.com/English/Solutions/Whitepapers.html

Also check out http://www.decru.com/

saqib
http://www.full-disk-encryption.net


Current thread: