KeySecure for Government, a dedicated and disparate enterprise key manager, simplifies the management of encryption keys across the entire lifecycle including secure key generation, storage and backup, key distribution, rotation, deactivation and deletion.
BrickStor utilizes KeySecure for Government to store and protect the Key Encryption Keys (KEKs) used within the cryptographic architecture. The KEKs are used to encrypt the Data Encryption Keys (DEKs) that are in turn used to encrypt the actual data. Both the DEKs used by the SEDs to encrypt at the drive level and the DEKs used by BrickStor to encrypt at the dataset level are secured by the KEKs that are stored externally on KeySecure for Government. In the event that BrickStor is rebooted, the KEKs must be retrieved from the key manager before the data becomes accessible. In the event of compromise, administrators can quickly use KeySecure for Government to deny access to involved keys without destroying them.
Back to Partner List