| 1 | <?xml version='1.0' encoding='UTF-8'?>
|
|---|
| 2 | <!DOCTYPE topic PUBLIC "-//OASIS//DTD DITA Topic//EN" "topic.dtd">
|
|---|
| 3 | <topic xml:lang="en-us" id="diskencryption-encryption">
|
|---|
| 4 | <title>Encrypting Disk Images</title>
|
|---|
| 5 |
|
|---|
| 6 | <body>
|
|---|
| 7 | <p>
|
|---|
| 8 | Encrypting disk images can be done either using <ph conkeyref="vbox-conkeyref-phrases/vbox-mgr"/> or
|
|---|
| 9 | the <userinput>VBoxManage</userinput>. While <ph conkeyref="vbox-conkeyref-phrases/vbox-mgr"/> is easier to
|
|---|
| 10 | use, it works on a per VM basis and encrypts all disk images
|
|---|
| 11 | attached to the specific VM. With <userinput>VBoxManage</userinput>
|
|---|
| 12 | one can encrypt individual images, including all differencing
|
|---|
| 13 | images. To encrypt an unencrypted medium with
|
|---|
| 14 | <userinput>VBoxManage</userinput>, use:
|
|---|
| 15 | </p>
|
|---|
| 16 | <pre xml:space="preserve">VBoxManage encryptmedium <varname>uuid</varname>|<varname>filename</varname> \
|
|---|
| 17 | --newpassword <varname>filename</varname>|- --cipher <varname>cipher-ID</varname> --newpasswordid "<varname>ID</varname>
|
|---|
| 18 | </pre>
|
|---|
| 19 | <p>
|
|---|
| 20 | To supply the encryption password point
|
|---|
| 21 | <userinput>VBoxManage</userinput> to the file where the password is
|
|---|
| 22 | stored or specify <codeph>-</codeph> to let <userinput>VBoxManage</userinput> ask you
|
|---|
| 23 | for the password on the command line.
|
|---|
| 24 | </p>
|
|---|
| 25 | <p>
|
|---|
| 26 | The cipher parameter specifies the cipher to use for encryption
|
|---|
| 27 | and can be either <codeph>AES-XTS128-PLAIN64</codeph> or
|
|---|
| 28 | <codeph>AES-XTS256-PLAIN64</codeph>. The specified password
|
|---|
| 29 | identifier can be freely chosen by the user and is used for
|
|---|
| 30 | correct identification when supplying multiple passwords during
|
|---|
| 31 | VM startup.
|
|---|
| 32 | </p>
|
|---|
| 33 | <p>
|
|---|
| 34 | If the user uses the same password when encrypting multiple
|
|---|
| 35 | images and also the same password identifier, the user needs to
|
|---|
| 36 | supply the password only once during VM startup.
|
|---|
| 37 | </p>
|
|---|
| 38 | </body>
|
|---|
| 39 |
|
|---|
| 40 | </topic>
|
|---|
