Decru, a NetApp company, has announced the Decru OpenKey partner programme, which provides a business and technology framework for development of standards-based, multiparty encryption solutions. Symantec Corp. and Quantum Corp. have joined as charter members.

Many storage and data management vendors have announced plans to incorporate encryption and security features into their products. For large enterprises, however, the prospect of operating proprietary key management systems for every system and vendor presents substantial challenges.

To address these challenges, Decru has also announced new application programming interfaces (APIs) for the Decru Lifetime Key Management 3.0 appliance to enable centralised, standards-based key management services for multiple third-party encryption systems across the enterprise. The programme provides partners with the standards-based APIs, developer kits, reference implementations, and technical support to facilitate development of interoperable encryption and key management solutions. The OpenKey program builds upon Decru's role as an independent security vendor to facilitate development and standards cooperation among competing data management vendors.

Emerging storage security standards provide a starting point for development of interoperable encryption systems, but standards provide only a starting point. Successful integration and support of these systems requires a great deal of sustained vendor cooperation. Decru is the first storage security vendor to combine open key management with a full line of enterprise-class storage security solutions, enabling unified security across enterprise NAS, DAS, IP SAN, FC SAN, disk-based data protection, and tape environments.

The ultimate goal of the Decru OpenKey program is to help enterprise customers simplify the daunting security requirements for heterogeneous data management environments. By enabling centralised, secure key management for data encryption at multiple layers - including content management, applications, fabric, and storage devices - Decru has expanded the value it can offer enterprise customers.

Decru strives to incorporate emerging and accepted standards in its implementations, to ensure best practices and to maximise interoperability. Decru has been heavily involved in industry standards development efforts in the area of storage security. Decrus participation on standards committees includes:

• IEEE P1619: Decru co-authored the emerging P1619 storage security standard, and implemented many of the critical data-at-rest security features three years ago
  
• ANSI T10: Decru has contributed proposals for enhancing key security and authentication
  
• TCG: Decru is as a Contributor Member of the Trusted Computing Group, and participates in multiple committees.

Related links: (Open in a new window.)
www.decru.com

View printable version (opens in new window)
Back