120 likes | 241 Views
Continuous Availability. Operational Simplicity. Financial Advantage. VOS Encryption Capabilities. Secure Your Stratus Systems. Objectives . Provide comprehensive, cost effective data encryption program Satisfy internal audit requirements
E N D
ContinuousAvailability OperationalSimplicity FinancialAdvantage VOS Encryption Capabilities Secure Your Stratus Systems
Objectives • Provide comprehensive, cost effective data encryption program • Satisfy internal audit requirements • Satisfy corporate governance, regulatory and industry standards (PCI) • Eliminate security threats and vulnerabilities • Reduce cost by automation • Protect your most important asset – your data
Keys Database Key ManagementSystem Encrypted Business Databases Encryptor Components Encryptor TapeEncryptor Encrypted Tapes
Key Management • Keys are protected in a secure encrypted (AES) database • Keys may be changed up 50 times during their life cycle • Archives include date/time of change and user-name • Database and Key functions protected by • Standard VOS access controls • VOS/Auditor • Registration Admin • RADIUS • Encryption and Key Management require split knowledge
Key Management & VOS • Inherits VOS’ legacy security and registration features • Registration-Database authorization • RADIUS – external authorization • Login-Admin • Temporary restrictions • Account expirations and renewals • Failed access attempts • Password grace time • Password-Security Admin • Password format requirements • Password renewal
Keys Database Key ManagementSystem Key Management Encryptor Admin Registration Admin RADIUS VOS-Auditor VOS LOGIN Admin VOS PASSWORD Admin Archives
Keys Database Key ManagementSystem Encrypted Business Database VOS Encryptor Application Unchangeduser programs Seamless integration withexisting VOS application Encryptor AES, T-DESEncryption
VOS Encryptor • Provides fast, simple, reliable and transparent data encryption • Uses secure 128-bit keys • Meets PCI Key management requirements • Incorporates latest cryptographic algorithms (AES, 3DES) • Encrypts selected data - by file / directory • Supports all file types: Sequential, Fixed, Relative, Indexed • Allows local and remote encrypted tape save/restore • Offers simplicity and ease of use: • No additional hardware or software • No application changes • Single point of configuration • Practically no learning curve
Simplicity by design • Scalability • Single system-wide database • Multiple Application-based configurations • Flexibility • Single files • Directories • Star-names (wild-cards) • Exclusions • Conversion tools • Application business / transaction data • Static files (source-code, reports, configuration)
Keys Database Key ManagementSystem Business Databases (“Clear”) Tape-Encryptor: Save/Restore TapeEncryptor AES, T-DESEncryption Encrypted Tapes
Business Databases (“Clear”) Tape-Encryptor: Remote Non-Productionmodule Backup Backup TapeEncryptor Restore Restore TCP/IP Encrypted Tapes Performance overhead of Save/Restore and tapeactivities is off-loaded to a non-Production module
SoftMark solutions are exclusivelydistributed worldwide by Contact: Mr. Eran Mertens E-mail: em@stratusoft.com Telephone: 516-536-6200 ARI: http://www.stratusoft.com/ SoftMark: http://www.softmark.com/