How to encrypt update artifact?

General Discussions
, , ,
1

Hi,

Does mender support update artifact to be encrypted along with the signature verification? Did someone tried this yet?

Any inputs would be valuable.

Thanks in advance.

2

Hi @danie,

This is not supported out of the box. It may be possible to do this with a custom update module but I know we are considering how to handle this more fully moving forward. @eystein may have more info.

Drew

3

Indeed, we will add product support for this at some point!

Are you looking for symmetric / shared key encryption or something else?

4

Thanks for the info.

Evan a reference to symmetric (AES) encryption would be a great starting point.

5

Is there any news on this topic?
We are interested in both, symmetric and asymmetric encryption of the artifacts.

6

Hi @tacarrie,

Thanks for your interest. The situation at the moment is

  • it should be perfectly possible to create and deploy encrypted artifact payloads
  • there is no readymade solution for this, it would need to be a custom update module.
    One of the main concerns would be the key management. If you like to discuss your requirements in more detail, feel free to ping me directly and we can have a chat.

Greetz,
Josef