customers with significant operational cost savings today while consolidating their key management systems in the future. CryptoStor KeyVault delivers automated key management that allows one-step disaster recovery, secure sharing of data with business partners and key sharing with unprecedented security and ease-of-use.

Key and Policy Management

Highest Level of Security
A FIPS 140-2 Level 3 tamper-proof appliance ensures the foundation of security is solid. All hardware, software, firmware and user operation is covered by the FIPS certification leaving no weaknesses. Building on that foundation, secure communications between CryptoStor KeyVaults, NeoScale appliances, and 3rd party key management systems is assured with mutual session authentication using public/private key pairs and SSL/TLS protocols. At no time are keys ever exposed unencrypted outside of the secure tamper-proof appliance.

Global Key Management
NeoScale’s Global Key Management delivers a tiered strategy for complete key security while ensuring recovery of encrypted tape information from any authorized location.

Global Key Management has been delivered in every one of NeoScale’s appliance products to date and is now extended and enhanced to the Enterprise tier through CryptoStor KeyVault.

• Tape, Disk and SAN VPN – Key-per-tape, key-per-disk, key-per-session security for maximum granularity
• Appliances (CryptoStor Tape, CryptoStor Disk, CryptoStor SAN VPN) – FIPS operation mode ensures that unencrypted keys never leave the appliances. CryptoStor further supports M of N (shared secret) backup and recovery of system keys and configuration data for secure appliance recovery.
• Data Center – CryptoStor clustering automatically shares keys and policy data between clustered appliances to ensure automated recovery via any active clustered appliance. If an appliance fails, a replacement appliance can be quickly authenticated and synchronized with the remaining cluster members.
• Enterprise-wide – Using CryptoStor KeyVault, CryptoStor Tape appliances can now support worldwide tape recovery through any authorized, CryptoStor appliance or CryptoStor Tape Recovery Software application. This allows automated and secure sharing of media and keys between datacenters, one-step disaster recovery of keys, and secure sharing of encrypted media with business partners.