A computer system comprising: a processor; and a computer readable storage medium having stored thereon program code that, when executed by the processor, causes the processor to: maintain, in a secure storage or memory location of the computer system, a master key; and for each software service instance in a plurality of distributed software service instances that are communicatively coupled with the computer system: generate a service key that is unique to a current lifecycle of the software service instance, the generating being based on the master key and comprising: computing a first key derivation function that takes as Input the master key and a first cryptographic nonce, the computing of the first key derivation function resulting in an intermediary key; and computing a second key derivation function that takes as input the intermediary key and a second cryptographic nonce, the computing of the second key derivation function resulting in the service key; and transmit the service key to the software service instance, wherein the service key is used by the software service instance in creating a high integrity log. a processor; and a computer readable storage medium having stored thereon program code that, when executed by the processor, causes the processor to: maintain, in a secure storage or memory location of the computer system, a master key; and for each software service instance in a plurality of distributed software service instances that are communicatively coupled with the computer system: generate a service key that is unique to a current lifecycle of the software service instance, the generating being based on the master key and comprising: computing a first key derivation function that takes as Input the master key and a first cryptographic nonce, the computing of the first key derivation function resulting in an intermediary key; and computing a second key derivation function that takes as input the intermediary key and a second cryptographic nonce, the computing of the second key derivation function resulting in the service key; and transmit the service key to the software service instance, wherein the service key is used by the software service instance in creating a high integrity log. maintain, in a secure storage or memory location of the computer system, a master key; and for each software service instance in a plurality of distributed software service instances that are communicatively coupled with the computer system: generate a service key that is unique to a current lifecycle of the software service instance, the generating being based on the master key and comprising: computing a first key derivation function that takes as Input the master key and a first cryptographic nonce, the computing of the first key derivation function resulting in an intermediary key; and computing a second key derivation function that takes as input the intermediary key and a second cryptographic nonce, the computing of the second key derivation function resulting in the service key; and transmit the service key to the software service instance, wherein the service key is used by the software service instance in creating a high integrity log. generate a service key that is unique to a current lifecycle of the software service instance, the generating being based on the master key and comprising: computing a first key derivation function that takes as Input the master key and a first cryptographic nonce, the computing of the first key derivation function resulting in an intermediary key; and computing a second key derivation function that takes as input the intermediary key and a second cryptographic nonce, the computing of the second key derivation function resulting in the service key; and computing a first key derivation function that takes as Input the master key and a first cryptographic nonce, the computing of the first key derivation function resulting in an intermediary key; and computing a second key derivation function that takes as input the intermediary key and a second cryptographic nonce, the computing of the second key derivation function resulting in the service key; and transmit the service key to the software service instance, wherein the service key is used by the software service instance in creating a high integrity log.