 |
|
|
“Key management will become important as more devices add cryptographic capabilities and thus more data is encrypted. I think NeoScale has done a fantastic job of addressing this market direction with real products.”
- Jon Oltsik, Analyst
Enterprise Strategy Group |
|
|
|
|
|
CryptoStor KeyVault™
Enterprise-Class Key Management
NeoScale's award winning CryptoStor KeyVault is the industry's first secure, automated and open enterprise-class appliance for data-at-rest encryption key management. From its FIPS 140-2 Level 3 compliance to its open APIs allowing 3rd party vendor integration, CryptoStor KeyVault provides customers with significant operational cost savings today while consolidating their key management systems in the future. CryptoStor KeyVault delivers automated key management that allows one-step disaster recovery, secure sharing of data with business partners and key sharing with unprecedented security and ease-of-use.
Key and Policy Management
Highest Level of Security
A FIPS 140-2 Level 3 tamper-proof appliance ensures the foundation of security is solid. All hardware, software, firmware and user operation is covered by the FIPS certification leaving no weaknesses. Building on that foundation, secure communications between CryptoStor KeyVaults, NeoScale appliances, and 3rd party key management systems is assured with mutual session authentication using public/private key pairs and SSL/TLS protocols. At no time are keys ever exposed unencrypted outside of the secure tamper-proof appliance.
Highest Level of Automation
The management of enterprise encryption keys is too important to leave to chance with complex manual operations. The chance of user or operator error is just too high especially in critical situations such as disaster recovery. CryptoStor KeyVault automates all of the essential key lifecycle activities eliminating any chance of failure.
Security managers decide when and where keys should be made available and create Trust Relationships to automate their decisions. Once made active, Trust Relationships automatically ensure that keys are available when and where they are needed and only by properly authenticated consumers.
Highest Level of Openness
CryptoStor KeyVault is made open to 3rd party developers through published APIs (Application Programming Interfaces), sample code, and technical references, technical briefs and other documentation to help development.
Global Key Management
NeoScale's Global Key Management delivers a tiered strategy for complete key security while ensuring recovery of encrypted tape information from any authorized location.
Global Key Management has been delivered in every one of NeoScale's appliance products to date and is now extended and enhanced to the Enterprise tier through CryptoStor KeyVault.
- Tape and Disk – Key-per-tape, key-per-disk, key-per-session security for maximum granularity
- Appliances (CryptoStor Tape, CryptoStor Disk) – FIPS operation mode ensures that unencrypted keys never leave the appliances. CryptoStor further supports M of N (shared secret) backup and recovery of system keys and configuration data for secure appliance recovery.
- Data Center – CryptoStor clustering automatically shares keys and policy data between clustered appliances to ensure automated recovery via any active clustered appliance. If an appliance fails, a replacement appliance can be quickly authenticated and synchronized with the remaining cluster members.
- Enterprise-wide – Using CryptoStor KeyVault, CryptoStor Tape appliances can now support worldwide tape recovery through any authorized, CryptoStor appliance or CryptoStor Tape Recovery Software application. This allows automated and secure sharing of media and keys between datacenters, one-step disaster recovery of keys, and secure sharing of encrypted media with business partners.
Key Applications
- Segregated key domains protect categories of keys/data allowing service to be provided to many users
- Keys can be made automatically accessible from multiple data centers for flexible and secure sharing of one or all keys
- Once a disaster (or disaster test) is declared, a single click is all that is needed to make the offsite keys accessible at the disaster site
- Individual keys can be securely made available to partners
- Investment protection through open and active integration with 3rd party key producers such as encrypting tape drives, encrypting storage arrays, backup applications, databases, proprietary key managers and custom applications
Highlight Specifications
- Tamper-proof enclosure meeting FIPS 140-2 Level 3 requirements
- Role-based access using security best practices
- Cryptographic signed audit log
- System Key Security using SmartCards
- SmartCard authenticated access
- M of N key recovery (shared secret)
- All keys encrypted and stored within the cryptographic boundary of the appliance
- Support for million of keys
- Unlimited number of key domains
- Web GUI, CLI
- SSL/TLS communications and SSH remote access
- Authenticated and role-based users: administrator, security officer, recovery officer, key domain manager, auditor
- 2U, 30 lb, 19” rack mountable (17”x30”x3.5”)
- Hot swappable, redundant fans and universal power supplies
- 100/240 VAC, 50/60Hz, 460W
- FIPS 197: Advanced Encryption Algorithm
- FIPS 180-2: Secure Hash Standard
- FIPS 186-2: Random Number Generator
- FIPS 186-2: Digital Signature Standard
CryptoStor KeyVault FAQs
|
