Detections
Analytics

5.22 Encryption - 'Use HSM for storage of master key'

Information

Where possible use an HSM to store the master keys for Transparent Data Encryption. All encryption and decryption operations that use the
master encryption key are performed inside the HSM. This means that the master encryption key is never exposed in insecure memory.
Level 2, Not Scorable
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.as manual verification is required in order to determine if a HSM for storage is needed.

See Also

https://workbench.cisecurity.org/files/580

Item Details

Plugin: Windows

Control ID: 0a2a89ee94fb0e2bc05bd64ad0309ed9a1ddbcf3bab884566d21b6dedf29d251