HIPAA/HITECH - do we need to encrypt sites/default/documents?

OpenEMR Development
1

vambati wrote on Wednesday, September 25, 2013:

in order to comply with HIPAA/HITECH of resting PHI - do we need to encrypt sites/default/documents ?

-Venkat

2

tmccormi wrote on Wednesday, September 25, 2013:

I would encrypt the whole drive containing openemr database and files
On Sep 24, 2013 5:04 PM, “venkat ambati” vambati@users.sf.net wrote:

in order to comply with HIPAA/HITECH of resting PHI - do we need to
encrypt sites/default/documents ?

-Venkat

HIPAA/HITECH - do we need to encrypt sites/default/documents ?https://sourceforge.net/p/openemr/discussion/202506/thread/920582ec/?limit=25#3da0

Sent from sourceforge.net because you indicated interest in
OpenEMR / Discussion / Developers

To unsubscribe from further messages, please visit
SourceForge.net: Log In to SourceForge.net

3

jcahn2 wrote on Wednesday, September 25, 2013:

This is probably known to most of you, but after a week of Googling and trial and error, I found a simple way to move the mysql databases to an alternate location from /var/lib/mysql. Now they are on my encrypted /home partition in Ubuntu.

as root:
/etc/init.d/mysql stop
mv /var/lib/mysql /var/lib/mysql_orig
cp -R /var/lib/mysql_orig/* /home/user/databases/
mkdir /var/lib/mysql
mount -o bind /home/user/databases /var/lib/mysql
chown -R mysql:mysql /var/lib/mysql
/etc/init.d/mysql start

add this line to /etc/fstab
/home/user/databases /var/lib/mysql none rw,bind 0 0

This is working so far :>)
Jack

4

cverk wrote on Wednesday, September 25, 2013:

Its not too hard to do under windows. I used Truecrypt to make an encrypted drive and placed the whole xampp folder in it. The only little trick is you can’t really run as a service because it isn’t available at boot up until you mount it with Truecrypt. Then you have to run xampp control to turn on apache and php.