Dell Data Protection | Encryption Enterprise Edition
Simple, comprehensive & flexible data security for your entire organization.

Overview:

Organizations today must find a way to securing endpoint devices and the data on them, while still embracing computing trends such as bring-your-own-device and workforce mobility. Traditional encryption solutions attempt to address these needs, but most are difficult to deploy and manage, lack coverage for all endpoints, and reduce performance for users.

Dell Data Protection | Encryption (DDP | E) provides a datacentric, policy-based approach to encryption which protects data on any device or external media. Designed for easy deployment, end-user transparency, and hassle-free compliance, DDP | E delivers a high level of protection, fills critical security gaps and allows you to manage encryption policies for multiple endpoints and operating systems—all from a single management console.

Dell Data Protection | Encryption is a flexible suite of enhanced security solutions that include software- and hardware-based encryption, enhanced management of Microsoft BitLocker, and protection of data on external media, self-encrypting drives, mobile devices and data in public cloud storage services.

Enterprise Edition

Dell Data Protection | Enterprise Edition (DDP | EE) includes software-based, data-centric encryption that protects your data without disrupting IT processes or end user productivity. It allows IT to easily enforce encryption policies, whether the data resides on the system drive or external media, and doesn’t require end user intervention. A perfect solution for mixed-vendor environments, DDP | EE enables:

• Automatic deployment and provisioning when factoryinstalled on Dell commercial devices
• Fast and easy deployment in less than thirty minutes¹ in VMware environments with Wizard-based installation and fully integrated database and key management
• No required defragmenting before encryption
• System disk and external media encryption in a single solution
• Coverage for mixed-vendor environments, including both Windows and Mac operating systems
• Easy compliance management and auditing with onetouch compliance policy templates, remote management and quick system recovery
• Integration with existing processes for authentication, patching and more
• Sales and support for your hardware and security solutions from one source
• Encryption of all data, except files essential to booting the operating system or full disk encryption, depending on your preference
• Enhanced port control system to prevent data leakage
• Ability to encrypt based on end user profiles, data and groups within your organization
• Centralized management of all encryption policies, including self-encrypting drives and Microsoft BitLocker encryption
• Enhanced authentication for OPAL standard devices, including smart cards and single sign-on

Give your organization the security it deserves.

Dell Data Protection | Encryption Enterprise Edition offers comprehensive solutions with strong manageability so you can be confident your data is secure.

• Comprehensive protection that is IT friendly - Software-based Data Centric Encryption enables IT to easily enforce encryption policies, whether the data resides on the system drive or external media. Designed for mixed vendor environments, it also won’t get in the way of existing IT processes for patch management and authentication.
• Deliver high levels of security and protection - Exclusive to select Dell Latitude, OptiPlex and Dell Precision systems, the optional Full Volume Encryption1 solution equips end-user systems with military-grade protection that won’t slow your employees down. Using a Hardware Encryption Accelerator1, it provides functionality similar to a self-encrypting drive without limitations on drive size. It also reaches one of the highest levels of U.S. Federal Information Processing Standards (FIPS) 140-2 certifications for endpoint disk encryption.
• Enforce external media policies, even outside your walls - Protect external media and fill critical security gaps with External Media Edition, available separately or as part of Dell Data Protection | Encryption Enterprise and Personal Edition. Central management and flexible policies allow you to secure data critical to your organization while allowing end users to store personal information on external media.
• Easily manage the encryption you already have - Get enterprise level management, auditing and reporting capabilities from Microsoft BitLocker Drive Encryption on Microsoft Windows 7 Ultimate and Enterprise with the BitLocker Manager feature of Dell Data Protection | Encryption Enterprise Edition.

Hardware Crypto Accelerator

For customers needing a higher level of security, Dell offers hardware-based encryption with the Dell Data Protection | Hardware Crypto Accelerator (DDP | HCA), which works in conjunction with DDP | Enterprise Edition. Exclusive to select Dell Latitude laptops, OptiPlex desktops and Dell Precision workstations, the DDP | HCA offers the highest level of U.S. Federal Information Processing Standards (FIPS) certification for a commercially available disk encryption solution. The solution helps prevent attacks on crucial security information—all without slowing users down.

DDP | HCA

• Offloads encryption processing to hardware for enhanced performance over software encryption
• Is available on select Dell Precision, OptiPlex and Latitude systems in conjunction with Dell Data Protection | Enterprise Edition
• Offers tamper-resistant protection and identitybased authentication with FIPS 140-2 Level 3 validated encryption
• Encrypts all data and works with the system firmware and the Trusted Platform Module (TPM) to provide enhanced encryption key protection
• Option for users to opt in and activate with a portal that supports self-service decryption and un-install if supported by policy
• Does not require disk defragmenting, user state migration or other complicated preparation before encryption
• Virtual keyboard available during Pre boot authorization when physical keyboard not available

Enterprise Server – Virtual Edition

Deployment of any enterprise-wide application can be a daunting task, and encryption products have typically been no exception — until now. Utilizing a purpose-built virtual management server and console app for VMware, Dell has raised the bar on how easily and quickly our endpoint encryption solution, Dell Data Protection | Encryption, can be up and running in most mid-sized enterprise environments with up to 3,500 endpoints.

The DDP | Virtual Edition Server makes DDP | E the perfect choice for small to mid-sized organizations who have already made an investment in VMware and are looking for a simple, rapidly deployable management platform for their encryption and authentication policies. It contains all of the same features and benefits of the standard DDP Enterprise Edition Server, including full support for the broadest range of encryption coverage available for laptops, desktops, mobile devices, external media, BYOD and public cloud storage.

Managing Self-Encrypting Drives with Dell Data Protection | Enterprise Edition

Organizations using self-encrypting drives (SEDs) also require careful management if they are to be effective in reducing the risk of data loss and meeting their audit and compliance goals.

Dell Data Protection | Enterprise Edition provides a centralized, secure management for self-encrypting drives across your organization, both local and remote. All policy, authentication, management tasks, storing and retrieval of encryption keys are available from a single console, reducing the work of keeping critical data safe, and reducing the risk that systems are unprotected in the event of loss or unauthorized access. Most importantly – the management for OPAL standard devices is fully integrated in the same data protection platform as filebased encryption, Microsoft BitLocker, removable media encryption, smartphone security and encryption of data in public cloud storage.

Remote management capabilities include the ability to:

• Disable logins and wipe user cache to protect data and ensure that only an authorized administrator can reenable access to the protected data
• Disable the device to prevent any user from logging into the system until an unlock command is sent
• Enable the device so users can login to use the SED
• Perform a remote and automatic unlock on the disk, enabling administrators to perform essential tasks such as patching without needing to leave the device unlocked overnight
• Deliver full pre-boot authentication including authentication using Active Directory
• Set policies for automated response to attacks (including brute-force attacks)