|
I'd bet dollars to donuts that they mean the whole flash or partition is encrypted, not individual files. It's one of the loopholes of compliance checkboxes. I've got servers that are encrypted at rest (powered off or pre-boot), but upon boot up the filesystem is unlocked and everything is accessible.
|