MQSeries.net :: View topic - NTFS Encryption of Log and Data Directories (Windows)

extrospect · Posted: Thu Mar 11, 2004 11:28 pm Post subject:

We would like to encrypt data & log messages on the Windows NT file system (in our DMZ); ideally without resort to third party tools.

1. Can this be done? I've tried turning on NTFS encryption on just the log directory, and was unable to start up MQ. I even tried changing the "Run As' user for MQ to the user which owns the log directory (its owned by the id used to talk to the primary domain controller) and that did not help. Has anyone been able to implement file system security on NT by changing file ownership or run as, and then enabling encryption on subdirectories?

2. If there is no way to accomplish file system encryption through NTFS options, is there any inexpensive third party tool which can do this work without requiring encryption/decryption at our counterparty. We are interacting with counterparties over leased lines, so we are mostly interested in file system security in our DMZ.

3. Finally, do most companies install MQ in their DMZ? When they do, how much concern is there about file system encryption?

Thanks,
Mark