CSE Qualifies WinMagic’s SecureDoc v4.3 for Canadian Government

SecureDoc Full-Disk Encryption on Canadian Government’s Procurement List

Mississauga, Ontario, October 18, 2007 – WinMagic^® Inc. (www.winmagic.com), the innovative leader in disk encryption, today announces that its SecureDoc v4.3 full-disk encryption solution has been qualified by the Communications Security Establishment (CSE) for inclusion on the IT Security Pre-qualified Product List (IPPL) under the IT Security Product Pre-qualification Program (IPPP). The IPPP is an initiative jointly led by the CSE and Public Works and Government Services Canada (PWGSC) to pre-qualify IT security products for use within the Government of Canada (GC).

The objective of the program is to facilitate the procurement of IT security products by GC departments that meet CSE's pre-qualification criteria. IT security products which are to be considered by CSE for placement on the IPPL must meet one or more of the following requirements:

• Validation to FIPS 140-1 or FIPS 140-2, or integration of a cryptographic module validated to FIPS 140-1 or FIPS 140-2 under the Cryptographic Module Validation Program (CMVP);
• Endorsement under CSE's Cryptographic Endorsement Program (CEP); or
• Certification or recognition under the Canadian Common Criteria Scheme (CCS).

SecureDoc holds not only FIPS 140-2 Level 1 but is also the only full disk encryption solution to achieve Level 2 from the National Institute of Standards & Technology (NIST) of the US Department of Commerce. SecureDoc has also achieved BITS Tested Mark for use by financial industry, earned Common Criteria Evaluation Assurance Level 4 (EAL 4) Certification (the highest level that is recognized in over 20 countries worldwide), and is the only disk encryption software certified by the NSA to safeguard U.S. government’s “SECRET” level data.

SecureDoc also passed a separate examination process performed by the CSE which verified that:

• SecureDoc uses FIPS-approved cryptographic algorithms and key management scheme;
• SecureDoc does not contain known vulnerabilities which pose unacceptable risks; and
• SecureDoc has potential application within the Government of Canada

“This certification from the CSE underscores WinMagic’s commitment to the Canadian Government and governments worldwide,” said Thi Nguyen-Huu, CEO for WinMagic. “Internationally, government agencies and organizations alike are looking to protect against data breaches from lost or stolen notebooks and information leakage from removable media devices.” Nguyen-Huu continued. “WinMagic’s numerous certifications, including Common Criteria and FIPS 140-1 and 140-2, ensure organizations can be certain that SecureDoc not only protects all data, but also complies with all international data security requirements.”

Working at the pre-boot level, SecureDoc makes it simple to incorporate single- or multi-factor authentication through passwords, USB tokens, smart cards, biometrics, TPM and PKI technology. For a list of smart cards and readers supported by SecureDoc, visit http://www.winmagic.com/solutions/third-party-integration.html. SecureDoc also supports removable media including USB thumb drives, flash removable media, and CD/DVDs – enabling organizations to transparently implement IT data security policies that will ensure that all removable media are encrypted to prevent data leakage of personal identifiable information and sensitive data.

Compatible with all editions of Microsoft Windows Vista, XP, and 2000, SecureDoc Enterprise Edition makes it simple to configure user/group profiles, deploy them, and manage them for tens of thousands of users. Remote features permit adding, removing, or augmenting user/group profiles as well as allowing password recovery and integration/synchronization with Active Directory and other LDAP servers.

In addition, it is uniquely positioned to provide the dynamic provisioning of keys and key files to users, and possesses the unique ability to label keys in human readable terms so that they can be easily identified and recognized for encrypted archived data stores. Problems related to unlocking these long term storage archives are solved as the respective encryption key can now be dynamically provisioned. Passwords will not be remembered 20 years from now, but the encryption keys can still be easily identified in human readable text formats.

About WinMagic Inc.
WinMagic’s robust and innovative SecureDoc software provides the world’s most secure full-disk encryption. Easy to use, deploy, and manage, SecureDoc Enterprise Edition makes it simple to combine full-disk encryption with user authentication at pre-boot. Authentication is provisioned in a single- or multi-factor fashion including password, smart card, TPM, hardware token, PKI, and biometrics. SecureDoc protects data at rest for endpoint devices including desktops, notebooks, external USB drives, and CD/DVDs. WinMagic’s data at rest solution provides granular capabilities of end-user management at an enterprise level through integration with MS Active Directory, LDAP servers, or PKI. SecureDoc’s unparalleled robustness, operability, and performance allows for easy enterprise deployments offering centralized administration with remote installation, and password recovery. Headquartered in Mississauga, Canada, WinMagic operates in over 43 countries. For more information on products or services, please visit www.WinMagic.com, call 1-888-879-5879, or email info@WinMagic.com.