Brief

Simple, secure and cost-effective
self-encrypting drive management
While the encryption capabilities of the
drives are the primary level of security,
management of the self encrypting drives
is critical to its execution. In fact, the
security capabilities offered with drive-
level encryption are only as good as the
management tool used to implement and
manage them.
Intel is pleased to offer Intel® RAID
Controllers powered by LSI MegaRAID*
technology including Safestore* encryp-
tion services which combine local key man-
agement with self-encrypting drives. This
represents a signicant step forward in
securing a drive’s data from the enterprise
to the small-to-medium business. Offered
with select models of Intel’s SAS 2.0 fam-
ily of RAID products, SafeStore local key
management maintains and controls the
key linkage and communications with the
self-encrypting drives, secures user-se-
lected volume groups, and authorizes the
drives to encrypt and decrypt data with
pass phrase and security key manage-
ment. SafeStore local key management
uses simple and intuitive conguration
menus to effectively protect data from
any unauthorized access or modication
resulting from theft, loss, or repurposing
of drives.
Secure
By embedding the intelligence to manage
self-encrypting drives in Intel RAID Con-
trollers, SafeStore local key management
removes the administrator from most of
the daily tasks of securing data, thereby
reducing user error or the compromising
of data. SafeStore local key management
also supports instant secure erase of
drives which permanently removes data
when repurposing or decommissioning
drives. This provides a much more secure
level of data erasure than other common
erasure methods, such as overwriting or
degaussing.
SafeStore
Encryption
Services
Application
Server
Authentication Key Unlocks/Locks Data Flow
Figure 1: Data encryption process with Intel SafeStore Key Management
Intel RAID Controller
2