Does Atlassian provide support for encrypted data at rest?

[Greg Elofson]

We're using single instance EC2s for our Jira setup. We're migrating from on-prem 7.3 to AWS, then upgrading to 7.13 and onto 8.5. My question goes to whether Atlassian provides support for encrypted data at rest? (as opposed to a question about SSL connection from Jira to the DB).

[Brant Schroeder · Accepted solution]

Greg,

Atlassian doesn't officially support encrypted databases - that is, Atlassian Support can't help if you experience configuration issues with encrypted fields. Some folks are definitely doing it.

There are also options like Encryption for Jira that allow you to encrypt portions of Jira (attachments and custom fields). https://marketplace.atlassian.com/apps/1215791/encryption-for-jira?hosting=server&tab=overview&utm_source=Encryption%20for%20Jira&utm_medium=Blog&utm_campaign=E4J%20re-launch

The Atlassian cloud runs on encrypted databases as well so you might also look at it as an option.

[Greg Elofson]

Thank you, Brant.

[Adrian Stephen]

Hi @Greg Elofson 

JIRA does not have encryption at REST.

If you would like to run JIRA more securely, you can run Jira over SSL/HTTPS where a secured connection will be used. Here are some articles which can help you get started :

• https://confluence.atlassian.com/jirakb/how-to-configure-jira-server-applications-for-security-best-practices-785324598.html
• https://confluence.atlassian.com/adminjiraserver/preventing-security-attacks-938847893.html

I hope this helps. 

Regards,

Adrian Stephen