Where are the data keys stored?
Data keys are stored with a variety of methods, and we are constantly adding new methods. The primary methods are:
- Stored in a strongly encrypted file (called a profile) on the local drive.
- Stored in a profile on removable media. The authorized user must insert the removable media to start the secured process, such as SQL Server. (The media can be removed once the application starts).
- Stored in a profile on a remote machine (referred to as a proxy location). If the proxy location is not found, the secured process cannot be started.
- Embedded into the application with an API call.
- Stored in a separate Key Store. NetLib Security offers the Encryptionizer Key Manager for secure key storage, including key management, rotation, access permissions.
- Accessed in 3rd party key stores such as the Azure Key Vault.