Messages

Thanks for your thoughts, I will definitely move the PKI to a host under my control.

I'm still interested to know if OPNsense can be used with disk encryption (bioctl, gbde or geli)?

Thanks,
Steve

I'm running OPNsense as a cloud base installation to provide a VPN responder, as such there are private keys etc. stored in a datacenter that's not under my control.

If for some reason my virtual server was copied and fell into the wrong hands, would full disk encryption provide protection from data loss?

Is it possible to install OPNsense with full disk encryption (if so how)?

Does OPNsense already have builtin protection for this?

Any thoughts or feedback on this scenario gratefully accepted...

Thanks,
Steve