encrypt the disk
use dm-crypt and LUKS
seal the key to a TPM and use access restrictions according to well-known PCR set.
use secure boot
Intel TXT and TBoot are capable of securely booting a Linux Kernel. You have to check whether your CPU and chipset support TXT.
Without secure boot the only way to prevent the TPM from releasing the ...
The current list presented to me in the AWS console is:
US East (N. Virginia)
US West (Oregon)
US West (N. California)
Asia Pacific (Singapore)
Asia Pacific (Tokyo)
Asia Pacific (Sydney)
South America (São Paulo)
So no, there's no UK option. That said, and bearing in mind that we are not legal experts here and do not do legal advice, I'd be ...
ASP.NET Core can store Keys pretty much anywhere:
IIS User Profile ( can in which keys are persisted to the HKLM registry in a special registry key that is ACLed only to the worker process account. Keys are encrypted at rest using DPAPI)
Azure KeyVault, Azure Storage Account
Azure app keys (at %HOME%\ASP.NET\DataProtection-...
Client has physical and root access to the server.
Then you can't do anything to stop them reading your data, they have the tools to snapshot disks/memory etc and can analyse them. You may be able to slow them down by using whatever virtualisation technology the host provides to create a Linux VM and encrypt it's disks with LUKS. Note though that your ...
You're doing right things. Just a few tips to consider before you start (if not too late). If you use incremental backup chains (not incremental-forever), then you should be able to free some space up by deleting previously used chain(s). In case of reverse incremental chain, it's even easier with deletion of the most outdated points.
General recommendation, ...
Information about whether the logon process in OSQL is secure or not seems to be sketchy and contradictory (see here)
I think SQLCMD supports SSL encryption which would prevent the password being sniffed over the wire - but if you're storing the password in a script or something and you're worried about prying eyes, encrypt it and decrypt it yourself before ...