3 ms·
How these work on a headless server where you cannot enter password upon boot? If someone steals the server can they read data?
by varispeed 2y ago
How these work on a headless server where you cannot enter password upon boot? If someone steals the server can they read data?
- wildzzz 2y agoThat's what physical security is for. We only have bitlocker on our laptops.
- varispeed 2y agoThere is security, but once I caught building management employee getting into office to check aircon. It was unannounced and probably permitted under contract (as an emergency access). If that person took the NAS, maybe they would get caught, but data still would be compromised.
- marcinzm 2y agoI'm not too familiar with this but as I understand it you you may have the disk encrypted with a key that is loaded from some other server at boot automatically. The key server may then require a manual un-seal to un-encrypt it's own key storage. If you steal the server and it loses power then the key is gone. Of course, there's ways around this like switching the server to a battery and possibly then literally freezing the RAM to dump it.