From you link:
>"Servers use full disk encryption and the key must be manually entered at boot."
I am curious how do you handle key rotation and storage of encryption keys?
>"Servers use full disk encryption and the key must be manually entered at boot."
I am curious how do you handle key rotation and storage of encryption keys?
But we think it is feasible to drop the disks entirely for the main servers. So the disk encryption is an issue for the systems holding our CI and imaging platforms.