Zserver® Storage Linux Version

Linux Version

Zserver® Storage for Linux possesses many of the same features found in ZServer Storage for Windows. However, there are some notable differentiators:

Generating Encryption Keys

Encryption keys are created on the basis of a random number sequencing and are generated by using your computer’s devices and sensors. After each key is generated, a statistical analysis is completed allowing the user to validate the key’s “randomness.” The generated key can be written to a smartcard with PIN access or to a file. When generating keys, Zserver Storage for Linux uses several methods to generate these keys: 

• Motions generated from mouse movement

• Quantum random number generator, “Quantis”

• Noise collected from microphone sound cards

• Network adapters and time intervals between data packets arrivals

• Microsoft Crypto API

• HEX-editor and manually written random sequences

System Configuration in Zserver Console

Zserver Storage for Linux provides users with the flexibility to configure and utilize system modules via Zserver Console – Zserver Storage’s administration console. Through the Zserver Console, system administrators can:

• Shutdown/restart the server

• Specify how the server should react to various system events (e.g. log the event, run script)

• Add users and manage their rights, providing that the administrator possesses “root” level access

• Configure events that require user’s confirmation before execution

• Console display configurations

• System configurations can be stored and loaded from the save file.

Handling of System Events

Zserver Storage for Linux enables administrators to specify how to handle a system event by triggering a subsequent action. This chain of events includes options to enter the record into the system’s event log, run a script/chain of scripts, or trigger other system events.

Through Zserver Storage, the administrator can: 

• Change the event configuration

• Create, load and unload encryption keys

• Attempt to open or close disk sectors and results

• Encrypt or decrypt disk sectors

• Change to the server configurations or the access rights to the ZServer Storage administration

Running Scripts

Zserver Storage Console allows administrators to run an external script -- an executable or a script file – upon conclusion of a system event. The running instruction is given from the “command line.” External scripts can encompass any type or file or program.

Event Logging

Each event is recorded to an event log, which contains the date and time of the event, server name where the event occurred and the user account name initiating the event.

The event log can be written to a file (XML or text in ANSI or Unicode) or to the server system log (syslog). The file name and the full path must be specified before it can be logged.

If the administrator opts for an XML file, Zconsole can be configured to receive notifications of specific events by providing a predetermined set of conditions to the system. The query results will be displayed in the console window, which can be exported and saved in HTML format.

Architecture

Zserver Storage for Linux consists of two main components:

1. Server-side data encryption module

2. Zserver Console server management

Server-side Data Encryption Module

The server-side data encryption module is installed where the hard disk needs the most protection and performs the following functions:

• Transparent “on-the-fly” data encryption/decryption

• Management of disk sectors

Upon installation, the system begins a set of processes responsible for interacting with the server. Server commands are transmitted either from Zserver Storage’s management console, or directly from the server’s native console using command line utilities.

The license key containing the Zserver Storage configuration information must be connected, through a USB port, to each protected server installed with the server-side component – ensuring the software is not replicated without proper authorization. The system will not operate without the license key.

Zserver Console Server Management

Zserver Storage Console can be installed on any workstation running Windows 2000/XP/2003/Vista/2008  and connected to the protected server through a LAN/internet connection.

The Zserver Storage Console can perform the following functions:

• Encryption keys management -- keys generation, loading/unloading of keys into server RAM, and keys copy/delete operations-- which can be performed both through the Zserver Console or directly on the server

• Zserver Storage configuration management (event handling, logs format, and users’ administration)

• Configuration and setup of event logs and remote access

System Requirements

Server-side data encryption module

• Linux kernel 2.6.x.

• Encrypted disk partitions, including: ext2, ext3, vfat, xfs or reiserfs

Zserver Console Server Management

• Windows 2000/XP/2003/Vista/2008 [32-bit (x86) or 64-bit (x64)]

Hardware Requirements

With the exception of a free USB-port – to connect a smartcard reader to the server or an administrator’s workstation – and the license key, Zserver Storage requires no additional hardware resources.

Supply Kit

Zserver Storage for Linux kit includes:
• USB license key
• Installation disk
• USB PC/SC-compatible smartcard reader
• Two smartcards
• Administrator's Guide