June 18, 2014
I just posted this to the LOPSA Tech list, but I figured I'd post it here too.
I have an interesting use case.
Because of a lack of space, a few machines which were "free range" in a locked office are now going to have to go into a shared space. The powers that be are concerned about the security of these machines, both in terms of the hardware being "liberated" and data exfiltration.
The machines are interesting because not only do they not require external network connections, they can't have it. The project specs require an air gap between the machines' network and my infrastructure.
My kneejerk reaction is that I should order a half height rackmount cabinet, special-order locks, and have modifications made so that it can be bolted or chained to the floor, but I've never had to bank vault-ify a rack before, so I thought I'd ask you first.
If you had to secure a rack from access in a public, shared space, and it didn't require external network access (so no tender, vulnerable wires poking out), how would you do it? What product(s) would you recommend?
Also, there's really no concern about securing the power feed. If it gets unplugged, that's sad, but it's not tragic, because neither the machines nor their data have been compromised in that case.