Service detail
IBM Data Security Services - tape encryption and key management consulting and implementation services can help you protect your sensitive data on tape without tapping into your server resources. And we can help you implement this technology to extend the capabilities of traditional backup and archive system solutions on diverse operating system platforms.
Highlights
- Addresses business requirements for data encryption
- Reviews and assesses your readiness for data encryption
- Provides design, implementation and operational procedure development services
Consulting services help you build a case for encryption of sensitive data on tape
Do you need assistance in determining whether or not you have a data exposure problem? IBM Data Security Services - tape encryption and key management offers consulting services that are designed to help clients better understand their security needs and exposures and develop a plan to address those areas.
Implementation services help set you up for data encryption success
Deploying a tape encryption and key management solution is more than just a plug and play implementation. There are many issues to consider, such as: what type of data you should encrypt, which business and IT operational processes the encryption solution might affect, and what new processes you need to develop.
What's more, the greatest advantage to an encryption solution - that encrypted data is unreadable without its designated key - can also be the most burdensome to an IT organisation. Keys must be secure, auditable and available when you need them - in the face of a disaster or decades after the original encryption.
Implementing an encryption key management infrastructure can be complicated, requiring many decisions regarding availability, backup and recovery of key-stores (repositories of encryption keys), key-store access and recovery and disaster recovery of key-store access. IBM can help you sort through this complex process and recommend procedures that most effectively complement tape management processes. IBM Data Security Services - tape encryption and key management offers you implementation services to address these issues and many others to help you implement a successful tape encryption solution.
| Tape encryption hardware | The high-performance IBM TS1120 Tape Drive is designed to provide reliable data encryption without draining IT performance. Rather than encrypting data at the host, the high-performance tape drive compresses the data first, then encrypts it at near-native tape drive speeds on the tape device itself. The resulting tape is unreadable to unauthorised users, thanks to integrated key management. |
|---|---|
| Key management software |
The solution's integrated key management software simplifies the key management process by providing the tools for generating, storing, transferring, loading, using and destroying cryptographic keys. With the IBM approach, data encryption keys are stored in an encrypted form on the tape media and are restorable only to users who satisfy advanced authentication and access controls. With these safeguards in place, the solution can eliminate the cost of procuring additional physical protection for data cartridges in transit, as well as the cost of data destruction for media that's no longer useful. You simply destroy the key and the tape cannot be decrypted. |
| System support |
IBM z/OS® IBM i5/OS® IBM AIX® Redhat Linux® HP-UX Sun Solaris Microsoft® Windows® 2000, 2003, XP Professional |
