encryptionBAB2015
blueScaleEncryption

Spectra BlueScale® Encryption Options
Spectra Logic offers three types of encryption: Free Spectra BlueScale Standard Encryption, optional Spectra BlueScale Professional Encryption and optional Spectra SKLM Encryption. Depending on your infrastructure, security levels and the amounts and kinds of data you want to encrypt, one of Spectra’s encryption offerings will meet your critical data protection needs — from small organizations to the largest, most security-conscious enterprises.

Spectra BlueScale Standard Encryption
Spectra BlueScale Standard Encryption is free and offers integrated encryption key management provided through the library’s user interface. Included as a standard feature on all Spectra libraries, BlueScale Standard Encryption Key Management encrypts data on tape easily, efficiently and without cost. Secure and easy to use, BlueScale Standard Encryption provides powerful key management features for encryption and decryption. BlueScale Standard Encryption is suitable for sites with a primary goal of securing data while it is transported to a remote location and stored for long-term archival.

  • Available in a free Standard Edition
  • Uses the AES-256 bit encryption algorithm
  • Library integrated key management for encryption-capable tape drives
  • Web-based Remote Library Controller (RLC) lets you manage data encryption safely from anywhere with a secured web connection
  • Extremely fast with no burden on the network
  • Keys are stored encrypted on the library
  • The tape drive encrypts the data as it is written to tape
  • Fits transparently into existing open systems environments with a vendor-agnostic, platform independent architecture
  • Compatible with major backup, archive and tiered storage applications
  • Encryption keys can easily be backed up, archived and shared with other Spectra libraries

Spectra BlueScale Professional Encryption
For an additional charge, Spectra BlueScale Professional Encryption provides additional choices for defining the level of security to implement in the data center. It is suitable for sites that want the added security of multi-password access to the encryption configuration controls and for importing and exporting encryption keys and the added flexibility of storing up to 30 encryption keys on the library.

  • All the benefits of the Spectra BlueScale Standard Encryption Edition (listed above)
  • Supports advanced features such as multiple keys and M-of-N key support
  • Quorum based authentication that allows users to construct hardened, defensible key control and sharing systems
  • Uses the AES-256 bit encryption algorithm
  • Library integrated key management for encryption-capable tape drives
  • Web-based Remote Library Controller (RLC) lets you manage data encryption safely from anywhere with a secured web connection
  • Extremely fast with no burden on the network
  • Data is encrypted as it is written to tape
  • Keys are stored encrypted on the library
  • Fits transparently into existing open systems environments with a vendor-agnostic, platform independent architecture
  • Compatible with major backup, archive and tiered storage applications
  • Encryption keys can easily be backed up, archived and shared with other Spectra libraries

Spectra SKLM Encryption

For organizations with more complex and robust requirements, Spectra SKLM Encryption Key Management is available for an extra charge as a standalone, centralized key manager that is time tested and proven across enterprise-level customers requiring the highest standard of encryption security. With optional Spectra SKLM encryption you can deploy a clean, simple key management solution that meets the complex requirements your organization faces. Spectra SKLM is a robust encryption key manager that delivers a unified key management strategy to streamline your encryption deployment.

  • Delivers a unified key management strategy to streamline encryption implementation
  • Uses the AES-256 bit encryption algorithm
  • Standalone server
  • Secure Initialization mode
  • Key and Device Grouping
  • Configuration, policies and key store backup
  • Certificates of authority
  • Centrally manage encryption keys across multiple libraries and data center locations
  • Enable strong authentication and strong security
  • Leverage flexible implementation options to meet your unique requirements
  • Enable secure, third-party data exchange
  • Simplify configuration and management tasks for keys and certificates of authority
  • Facilitate security audits and track key lifecycle from creation to destruction

Encryption Comparison
Spectra offers two types of BlueScale encryption (free Standard and optional Professional) to address diverse customer requirements. For an extra charge, SKLM encryption is a stand-alone, centralized key manager while BlueScale is integrated within, and specific to, each library.


Feature

BlueScale Encryption Key Management

Spectra SKLM Encryption Key Management

Library Integrated Server

X

Stand-alone Server

X

Supports T50e, T120, T200, T380, T680, T950, TFinity ExaScale

X

X

Spectra & IBM Library Support (dual vendor shops)

X

Secure Initialization Mode

X

Graphical User Interface

X

X

Command Line Interface

X

LTO4 Drive Support

X

LTO5 Drive Support

X

X

LTO6 Drive Support

X

X

LTO7 Drive Support

X

X

TS1150 Technology Drive Support (TFinity, T950, T380 only)

X

Multi-library / Multi-site Support

X

AES-256 Bit Encryption

X

X

Key Max: (Standard: 1 Key) (Professional: 30 Key)

X

Key Max: 1,000,000+

X

Key per Tape

X

M-of-N Key Shares

X

Symmetric Keys

X

X

Asymmetric Keys

X

Role-based Access Control

X

X

Key Grouping

X

Device Grouping

X

Key Group Policies

X

Key Rotation Policies

X

Key Lifecycle Status

X

Audit Verified Key Deletion

X

Certificates of Authority

X

Audit Trail

X

KMIP Compliance

X

IKEv2-SCSI Compliance

X

Configuration, Policies, & Keystore Backup

X

LDAP Support

X