4 ms·
If I can store drive encryption keys on a HSM in my old, consumer grade laptop, I would hope that large storage systems have at least the same degree of protect
by ac29 3y ago
If I can store drive encryption keys on a HSM in my old, consumer grade laptop, I would hope that large storage systems have at least the same degree of protection.
- deepsun 3y agoBut if that HSM module or machine suddenly dies, the system would lose all the customer's files. Not good.
- awesomeMilou 3y agoIf I understand it correctly, the HSM on the HDD dying is about as likely as a HDD PCB failure. Of course in these scenarios you can't just swap the PCB's to recover the data, but in an Enterprise setting you would have mitigated this anyways, by using a form of redundant storage. If you rely on just one drive for your data's continued existence, you're doomed anyways. [0] https://wiki.archlinux.org/title/Self-encrypting_drives https://wiki.archlinux.org/title/Self-encrypting_drives
- deleted 3y ago[deleted]
- Damogran6 3y agoThat's when you fall back to your backup processes....you HAVE backup processes, don't you? (They're resilient against ransomware, aren't they?)