Secure data storage
Plan how your business requirements and environment affect your approach to securing data at rest. Consider the performance implications of encryption and balance them with the enhanced security.
Consider the relative locations and conditions, and the sensitivity of your data to plan for the appropriate security for the following data at rest:
- Sensitive properties
- The master passphrase that is created during installation and is enabled by default secures access to sensitive properties by encryption.
- Data in storage is not encrypted by default during installation. It must be enabled before the system is put into service. There are significant performance implications for encrypting data in storage, but might be justified by the extra protection of the data.