Skip Navigation

CN6000 Series Encryptors – rack-mounted, carrier-grade encryption for high-speed Ethernet and Fibre Channel network

The CN6000 Series encryptors provide highly secure, full line-rate transparent encryption for data in transit across both dark fiber and metro / wide area Ethernet networks; in point-to-point, hub & spoke or meshed environments.

The CN6000 Series are rack-mounted, high-speed encryptors for mission-critical applications; offering 1Gbps to 10Gbps bandwidth speeds. They are the optimal choice when you require:

  • Efficient, investment-proof data encryption
  • Multi-purpose, in-field upgradable and flexible hardware
  • Choice of Common Criteria,and FIPS certifications
  • Compact 1U form factor with advanced performance and power features.

The CN6000 Series encryptors include integrated support for  KeySecure for Government, a centralized key management platform. KeySecure for Government provides simple and secure encryption key management across the entire lifecycle; including key generation, storage, distribution and deletion.

CN6000 Series Encryptors from Thales CPl are available for sale to the U.S. Federal Government exclusively through Thales TCT.

CN6100 10 Gbps Ethernet Encryptor: Market-leading encryptor, offering variable-speed licenses up to 10 Gbps.

CN6140 Multi-link Encryptor: Multi-port (1 or 10 Gbps), high-assurance encryptor designed to provide up to 40 Gbps (4x10), full line rate transparent encryption

CN6010 Ethernet Encryptor: Scalable Ethernet encryptor with variable license speeds up to 1 Gbps.


  • Encryptors At-A-Glance

    Key Features

    Model CN6010 CN6100 CN6140
    Protocol Ethernet Ethernet Ethernet
    Maximum Speed 1Gbps 10Gbps 40Gbps
    Ethernet point-to-point, hub & spoke, mesh full-duplex encryption
    Protocol and application transparent
    DoDIN APL Pending
    FIPS 140-2 L3 certified Pending
    Low overhead full duplex line-rate encryption
    Ultra-low latency for high performance
    Support for external (X.509v3) CAs
    Robust AES encryption algorithm
    CRL and OCSP server support
    Automatic key management
    Flexible encryption policy engine
    Encrypts Unicast, Multicast and Broadcast traffic
    Network interfaces RJ45 SFP XFP SFP
    Policy based on MAC address or VLAN ID
    Support for Jumbo frames
    Self-healing key management in the event of network outages
    Per packet confidentiality and integrity with AES-GCM encryption*
    Fibre Channel point-point encryption N/A N/A N/A
    Automatic network discovery and connection establishment
    Centralized configuration and management using CM7 and SMC
    AES 128 or 256 bit keys 128/256 128/256 128/256
    Remote management using SNMPv3 (in-band and out-of-band)
    Encryption modes CFB
    FPGA based cut-through architecture
    Tamper resistant and evident enclosure
    Anti-probing barriers
    Dual swappable AC or DC power supplies
    Flexible encryption policy engine
    User replaceable fans and battery module
    Fully interoperable with related CN/CS models
    Transport Independent Mode
  • Resources
    CN6010 Product Brief
    Product overview with technical features and specifications.

    Download Now

    CN6100 Product Brief
    Product overview with technical features and specifications.

    Download Now

    CN6140 Product Brief
    Product overview with technical features and specifications.

    Download Now


This site uses cookies to store information on your computer. Some are essential to make our site work properly; others help us improve the user experience.

By using the site, you consent to the placement of these cookies. For more information, read our cookie policy and our privacy policy.