Management

Symantec’s encryption products, now including PGP and Symantec Endpoint Encryption, enable organisations to deliver comprehensive data protection with proven standards-based technology. The easy-to-deploy solutions provide centralised policy management, accurate compliance-based reporting and true universal management of Symantec’s encryption products.

Symantec™ Drive Encryption with Universal Server
PGP™ Key Management Server from Symantec™, PGP™ Key Management Client Access C++ from Symantec™, PGP™ Key Management Client Access CLI from Symantec™

Symantec™ Drive Encryption with Universal Server

Symantec Drive Encryption provides organisations with a choice of PGP™ Whole Disk Encryption with PGP Universal™ to manage the Whole Disk Encryption deployments from an easy to use management platform. This platform allows enterprises to easily deploy, manage, and view reports on the status of their encrypted endpoints.

An enterprise may also choose the Symantec™ Endpoint Encryption Full Disk Edition for their full disk encryption needs for desktops and laptops. Symantec Endpoint Encryption provides a central management console, enabling safe, central deployment and management of encryption to endpoints.

What’s new:

PGP™ Whole Disk Encryption
AES-NI support for Mac OS X and Linux OS
Support for Windows 7 Starter Edition
Support for Windows 7 SP1
Support for RHEL 5.5, 6.0 and Ubuntu 10.04 Linux OS
Support for Single Sign On for certificate-based users in BootGuard

Symantec™ Endpoint Encryption Full Disk Edition

Management of Opal 1.0 compatible hard drives
Support for “F8 Safe Mode” checkbox for Opal drives
Support for Windows 7 SP1
Support for hard drives up to 2 (two) terabytes
Support for TrustBearer middleware for PIV token provisioning with user registration
Support for HID Cresendo C700 smart cards
Support for newly-added physical drives under management during client upgrade/update
Support for PCI-DSS access attempt lockout specifications
Server based commands for remote drive encryption and decryption

Key Features:

PGP™ Whole Disk Encryption

Rapid deployment - Automated deployments, platform independent, includes USB encryption
Centralised management - Automatic, centralised policy enforcement with single web-based management console for all clients.
Easy passphrase and machine recovery - Local self-recovery, one-time-use token and other recovery options.
Built PGP® strong - High performance, optimised, and strong encryption, built with PGP® Hybrid Cryptographic Optimiser (HCO) technology. FIPS 140-2 validated, CAPS-approved, DIPCOG-approved, CC EAL 4+ pending.
User-friendly - Background encryption with throttle capabilities. Fewer passwords to remember with support for Windows® Single sign-on.

Symantec™ Endpoint Encryption Full Disk Edition

Pre-boot password authentication ensures only authorised individuals have access to data
Easy central deployment, administration, and management features
Supports multiple users and administrators on individual machines
Key sharing mechanisms that allow users to share access to files securely

Marketing Description:

Symantec™ Drive Encryption allows enterprises to comprehensively and transparently secure all disk contents on desktops, laptops, including all temporary files, enabling cost-effective data protection. Centralised management enables rapid deployment, administrative access to protected data, and assured enterprise-wide security policy enforcement.

PGP™ Key Management Server from Symantec™
PGP™ Key Management Client Access C++ from Symantec™
PGP™ Key Management Client Access CLI from Symantec™

PGP™ Key Management Server from Symantec™ provides organisations with the infrastructure and tools to manage large scale deployments of encryption keys and certificates for multiple applications. Instead of using proprietary standalone key repositories or custom single purpose tools, PGP Key Management Server from Symantec delivers a strategic approach to managing encryption keys, designed to support different types of keys, trust models and applications.

What’s new:

Standard Certificate Signing Requests (CSR) support

Universal Server already supports importing CSRs for SKM keys via USP. The enhancement allows CSRs for CKM, GKM and SCKM keys to be imported into the Universal Server, as well as to enable full cycle management support (e.g. exporting and revoking) of the certificates generated or imported by the server.
Manual CSR enrolment – ability to input CSRs from external sources manually.
Certificate extensions - expand the feature set for generating CSRs to include additional certificate extensions.

Certificate Provisioning Agent (CPA) improvements

Certificate validity - allow PGP Command Line to take an input X.509 certificate, and ask the KMS (with supplied or cached credentials) whether the certificate is valid.
Authentication - allow the user to have multiple cached authentication credentials (USP cookies).
Additional extension – add support for Subject Alternative Name extension.

Key Features:

Author and enforce policy – Control administrative processes and key attributes through policy. Use policy to ensure that the environment operates within expected parameters.
Automate administrative tasks – Automate common tasks to reduce administrative effort and increase efficiency.
Generate key material – Create keys and certificates for use with different applications. PGP Key Management Server includes support for asymmetric keys and certificates (including X.509 and OpenPGP), symmetric keys as well as proprietary keys.
Provision – Provisioning works together with policy and automation to automatically deliver keys and certificates to applications.
Organise, protect and store keys – Store keys within the protected, fault-tolerant, high-availability database. Restrict access with centralised control over authentication and access rights. Recover keys with the appropriate processes and workflow. PGP Key Management Server supports integration with a hardware security module (HSM).
Manage – Oversee lifecycle management for distributed keys from the web-based administrative console.
Track – Avoid compliance and audit issues by having full accountability for encryption keys used throughout the enterprise.

Upgrade Information:

Free of Charge: Existing PGP Key Management Server customers with a current maintenance contract may upgrade free of charge.
Upgrade: Version Upgrade SKUs can be used by customers to reinstate lapsed maintenance.

Marketing Description:

PGP™ Key Management Server from Symantec™ helps organisations address the growing problem of managing encryption keys throughout the enterprise. By consolidating the administrating, provisioning, storing and reporting for cryptographic keys, IT organisations can expand their capacity to manage encryption and ensure that keys are properly handled and managed throughout their environment. It supports a number of integration approaches such as through its command line interface as well as a developer’s C++ interface. In addition, PGP™ Command Line from Symantec™ can communicate directly with PGP™ Key Management Server from Symantec™ to handle distributed creation, transportation and usage of keys.

For more information