1

I installed FreeBSD 10.1 and chose to encrypt the ZFS root volume and Swap during install.

I'm now realizing that on the remote KVM vserver I'm on the encryption makes rebooting harder and probably doesn't have the security effect I had in mind when I installed FreeBSD (all disks are decrypted as soon as I enter the passphrase during bootup).

So I'm now thinking of leaving the root volume unencrypted and leave encryption to specific folders / jails and the swap.

Does this make sense?

However I found lots of information about how to enable encryption on FreeBSD but none on disabling it. Is this even possible? If so: How?

Improve this question

1 Answer 1

Reset to default
0

Unfortunately, there isn't going to be an easy way to disable the encryption because the bits are already encrypted on disk. So a re-install with the encryption disabled may be your only option.

Improve this answer
1
  • I decided to just stick with it as the number of reboots will be very limited and (hopefully) only under controlled conditions
    – basbebe
    Commented Mar 13, 2015 at 10:30

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .