| FEATURES |
WinMagic
Data Security |
Competitor
Checklist |
| Centralized Management |
SecureDoc Enterprise Server (SES) uses Microsoft SQL Server as its data repository. This ensures our enterprise customers have a scalable DBMS that supports distributed computing, backup functionality, replication and clustering.
SES communicates with client-PC's via LAN, over the Internet, intermittent network or even if users do not have network access at all.
|
|
| Enterprise class DBMS |
SecureDoc Enterprise Server (SES) provides centralized administration for client's machines |
|
| Communication with Client PCs |
It provides several schemes of centralized deployment, import of user's data from an LDAP directory or Active Directory Service or PKI, remote control of client through encrypted communication, on-line password recovery via Web and more |
|
| Unlimited Profiles |
Ability to configure, deploy and manage an unlimited number of profiles for the IT environment |
|
| Centralized Administration |
Ability to configure, deploy, install and mange PC, Mac And Linux clients all under one enterprise server including the policy setting and the encryption of removable media |
|
| Dynamic Key Provisioning |
Ability to dynamically provision encryption keys to authorized clients. Also possess he ability to automatically share encryption keys with authorized clients. |
|
| File and Folder Encryption |
SecureDoc for FFE minimizes internal and external threats by encrypting folders and its contents on the hard drive and other destinations including USB. Using an encryption key (or encryption “policy”) SecureDoc clients can encrypt folders on the local or network drives.
FFE protected files remain encrypted even if accessed through network and copied. Content modifications of the FFE protected folders on the network are encrypted transparently.
FFE on removable media encrypts all the files/folder that are copied to removable media .
|
|
| Key Labelling |
Ability to label encryption keys in human readable terms for easy identification |
|
| Support of Self Encrypting Hard Drives |
SecureDoc has supported the Seagate Momentus Drive Trust self encrypting drive since August 2007, and today supports all Trusted Computing Group (TCG) Opal compliant drives. |
|
| Support of Intel Anti Theft Technology |
SecureDoc today is the only full-disk encryption vendor supporting Intel Anti Theft Technology thereby possessing the ability to send a poison pill to a client that will perform two functions; (10 disable the computing platform; and (2) perform an encryption data disable. |
|
| Support of multiple platforms within same IT environment |
SecureDoc supports PC, Mac and Linux clients alike under one enterprise management console. Just like the PC client, the Mac client supports self encrypting drives, removable media encryption and file / folder encryption. SecureDoc supposts both Tiger and Snow Leopard. |
|
| Strong Biometric Support |
Support for biometrics devices – all at pre-boot. WinMagic’s SecureDoc is the only product to support biometrics at pre-boot. It has been used by the U.S. Department of State in HSPD-12, FIPS 201 compliant projects. |
|
| Strong Access Control with Multifactor Authentication via passwords and Hardware Tokens. |
Pre-boot support sinlge and multiple factor authentication including password, USB token, smartcard, biometircs, PKI and TPM. As hardware tokens are gaining popularity, authentication and SSO become more important. WinMagic has delivered smartcard and PKI integration with SecureDoc since 2001 (e.g. to the New Zealand government). |
|
| Trusted Platform Module (TPM) Support |
SecureDoc supports TPM security chip at boot time. The TPM chip is embedded in newer laptops. |
|
| Interoperability with imaging software. |
SecureDoc interoperates with Ghost, Drive Image, Rapid Deploy, BootWorks, Rapid Restore and Rescue & Recovery. This significantly enhances the deployment capabilities within large organizations. |
|
| Virus Recovery |
User is able to recover data even if the disk is infected by viruses. The recovery software works as if the disk is not encrypted. |
|
| Compatible with various boot managers. |
SecureDoc is compatible with various boot managers. These include Boot Magic, Boot-US and Windows boot manager. SecureDoc supports systems that have multiple operating systems (multi-boot). |
|
| Compatible with Partitioning Software Managers. |
SecureDoc operates with partitioning software such as Partition Magic. Encrypted disk partitions can be resized; partitions can be added or deleted as if the disk is not encrypted. |
|
| Compatible with VMWARE. |
SecureDoc works with VMWare "out of the box". |
|
| Supports Hibernation Mode |
SecureDoc protects data in hibernation mode. |
|
| Supports removable media |
SecureDoc supports removable media (USB memory sticks, SD cards, ZIP, JAZ, etc.): Administrators can configure SecureDoc in order to:
1. Disable all removable media access
2. Allow read-only access if the removable media is not encrypted
3. Allow access only if the removable media is encrypted (with pre-defined keys etc.).
|
|
| Power Out Protection |
Robust capabilities that allow the initial encryption (conversion) to be interrupted by a power outage without data loss. |
|
| Large Disk Support |
Support disks as large as 2 Terabytes and an unlimited number of partitions. Furthermore, different partitions can be encrypted with different keys, e.g. for sharing. |
|
| Magneto Drive Support |
Support for encryption of Magneto Optical drives. Even though the removable Magneto Optical drives are most popular in Asia, the technology to support drives with sector sizes different than 512 bytes show the thoroughness and the modularity of the SecureDoc software design. |
|
| Support for RAID controllers |
SecureDoc can be used in a server environment with RAID controllers. |
|
| Full Disk Encryption |
Encryption of the entire disk, not only partitions. A test at Network Computing showed that users can add partitions and SecureDoc automatically encrypts them. |
|
| Compartmental Encryption Version |
Divides the disk into compartments, encrypted by different cryptographic keys. The separation is so strong that a virus in one compartment will not affect the other compartments. |
|
| Robust encryption |
User can run defragmentation tool during the initial conversion or at any point once the disk is encrypted. |
|
| Support of SHA-2 |
WinMagic has used the more advanced SHA-2 with SecureDoc V4 since early 2005 |
|
| FIPS 140-2 Level 2 (Certificate # 698) |
WinMagic is the only Software Encryption vendor on the planet to offer this level of protection. |
|
| Common Criteria EAL-4 |
SecureDoc possesses CC EAL-4 certification. Common Criteria provides assurance that the process of specification, implementation and evaluation of a full-disk encryption product has been conducted in a rigorous and standard manner. |
|
