Abstract: An apparatus includes a cryptographic key for decrypting content to be read from a storage media, and a control circuit. The control circuit is configured to, upon a boot of a server, dynamically generate a new boot authentication code using a prescribed method and determine a reconstituted boot authentication code. The reconstituted boot authentication code was reconstituted from an initial boot authentication code that was previously generated using the prescribed method. The control circuit is configured to compare the new and reconstituted boot authentication codes, and, based on a determination that the new and reconstituted boot authentication codes do not match, take a corrective action.

Abstract: An apparatus includes a cryptographic key for encrypting content to be written to a storage media. The apparatus includes a control circuit configured to determine that the storage media is to be removed from a server, and, based on the determination that the storage media is to be removed from the system, delete the cryptographic key.

Abstract: An apparatus includes a cryptographic key for encrypting content to be written to a storage media. The apparatus includes a control circuit configured to determine that the storage media has been physically moved, and, based on the determination that the storage media has been physically moved, erase the storage media by deleting the cryptographic key.

Abstract: A system includes a shard generation circuit configured to create shards from a security credential, and to recreate the security credential from the shards. The system includes a secret generation circuit configured to create secrets from a shard and to recreate the shard from a subset of the secrets, and store at least one of secrets in a location. The system includes another secret generation circuit configured to create secrets from another shard, recreate the other shard of the shards, and store at least one the shards in another, different location.