5

Overview encrypt the disk use dm-crypt and LUKS seal the key to a TPM and use access restrictions according to well-known PCR set. use secure boot Intel TXT and TBoot are capable of securely booting a Linux Kernel. You have to check whether your CPU and chipset support TXT. Security Without secure boot the only way to prevent the TPM from releasing the ...


3

The current list presented to me in the AWS console is: US East (N. Virginia) US West (Oregon) US West (N. California) EU (Ireland) Asia Pacific (Singapore) Asia Pacific (Tokyo) Asia Pacific (Sydney) South America (São Paulo) So no, there's no UK option. That said, and bearing in mind that we are not legal experts here and do not do legal advice, I'd be ...


1

ASP.NET Core can store Keys pretty much anywhere: File System Windows Registry IIS User Profile ( can in which keys are persisted to the HKLM registry in a special registry key that is ACLed only to the worker process account. Keys are encrypted at rest using DPAPI) Azure KeyVault, Azure Storage Account Azure app keys (at %HOME%\ASP.NET\DataProtection-...


1

Client has physical and root access to the server. Then you can't do anything to stop them reading your data, they have the tools to snapshot disks/memory etc and can analyse them. You may be able to slow them down by using whatever virtualisation technology the host provides to create a Linux VM and encrypt it's disks with LUKS. Note though that your ...


1

You're doing right things. Just a few tips to consider before you start (if not too late). If you use incremental backup chains (not incremental-forever), then you should be able to free some space up by deleting previously used chain(s). In case of reverse incremental chain, it's even easier with deletion of the most outdated points. General recommendation, ...


1

Information about whether the logon process in OSQL is secure or not seems to be sketchy and contradictory (see here) I think SQLCMD supports SSL encryption which would prevent the password being sniffed over the wire - but if you're storing the password in a script or something and you're worried about prying eyes, encrypt it and decrypt it yourself before ...


Only top voted, non community-wiki answers of a minimum length are eligible