Am I allowed to save a strongly encrypted archive containing the CHD on an external storage which is outside our PCI-DSS infrastructure ?
For example, we'd like to save an encrypted backup archive for last resort purpose on a server which is hosted inside our office.
The data is useless without the passwords, but if everything in the datacenter burns down, it would give us a chance to rebuild everything quickly. Each password would be hold by a single person.
We've got an affirmative answer from securityMetrics by the way, but we fear it is just an answer bot.