Next Generation KeySecure™ offers the industry leading enterprise key management solution enabling organizations to centrally manage encryption keys, provide granular access control and configure security policies across a comprehensive set of data protection connectors that run on the Next Generation KeySecure data security platform from Thales.
Available in multiple form-factors as hardened virtual and physical appliances with FIPS 140-2 levels 1 to 3 certification, NG KeySecure comes equipped with built-in back-up and restore of encryption keys, role-based access control with separation of duties, and robust auditing and reporting of key lifecycle changes.
The Next Generation KeySecure™ platform offers the industry leading enterprise key management solution enabling organizations to centrally manage their keys, protect data, and meet compliance requirements at a cost effective price-point. The Next Generation KeySecure models...
NG KeySecure enables you to centrally manage a variety of data protection connectors to encrypt data-at-rest across file-servers, databases, applications, virtual machines and public/private clouds. It makes it easy for organizations to consolidate their disparate encryption product deployments to simplify data security and compliance
Model Comparison |
k470 |
k570 |
|---|---|---|
|
Max Keys |
1,000,000 |
1,000,000 |
|
Max Concurrent Sessions |
1000 |
1000 |
|
Redundant hot-swap HDs and Power |
Yes |
Yes |
|
FIPS 140-2 Certification |
Level 2 chassis |
Level 2 chassis Level 3 w/ built-in HSM |
|
HSM Management |
Yes |
Yes |
|
Authentication |
LDAP and Active Directory |
|
|
Auditing and Logging |
|
|
|
Network Management |
SNMP v1, v2c and v3 NTP, URL health check |
|
|
API's Supported |
|
|
Hardware Specifications |
k470 |
k570 |
|---|---|---|
|
Dimensions |
19.0"(W) x 21"(D) x 1.75"(H) |
|
|
Weight |
12.7 Kgs. (28 lbs.) |
|
|
Processor |
Intel Xeon E3-1275v5 |
|
|
Network Interface Card (NIC) Options |
4x1GB interfaces 2x1GB / 2x10GB optional NICs NIC bonding support |
|
|
Hard Drive |
1 X 2TB SATA SE (spinning Disk) |
|
|
Mother Board |
AIC AntliaAIC Antlia |
|
|
Average Power |
0.7A @ 120V 84W |
|
|
Maximum Power |
100W |
|
|
Voltage |
100 – 240V 50-60 Hz |
|
|
Operating Ambient Temperature |
0 to 35 degree C (32 to 95 degree F) |
|
Model Comparison |
k170v |
k470v |
|---|---|---|
|
Max Keys |
25,000 |
1,000,000 |
|
Max Concurrent Sessions |
1000 |
100 |
|
FIPS 140-2 Certification |
Level 1 virtual appliance Level 3 with external HSM |
|
|
API's Supported |
JCE,.NET,MSCAPI, MS CNG, NAE-XML |
|
|
Authentication |
LDAP and Active Directory |
|
|
Auditing and Logging |
Extensive Statistics |
|
|
Network Management |
SNMP v1, v2c and v3 NTP, URL health check |
|
|
API's Supported |
JCE, .NET, MS-CAPI, MS CNG, NAE-XML |
|
Hardware Specifications |
k470 |
k570 |
|---|---|---|
|
System Requirements |
HD: 100GB RAM: 4-8 GB NICs: 1 -2 CPUs: 2 or more |
HD: 200GB or more RAM: 16 GB or more NICs: 2 or more CPUs: 4 or more |
Full Key Lifecycle Management and Automated Operations: Simplifies management of encryption keys across its entire lifecycle, from secure key generation, storage and backup, and key distribution, deactivation and deletion. CM makes automated, policy-driven operations easy for tasks such as key expiry and key rotation.
Centralized Access Control and Authorization: Unifies key management operations across multiple data protection connectors while maintaining granular access control to administrative operations. Authenticates and authorizes administrators using your existing AD and LDAP credentials.
Single Pane of Glass: Provides a unified console for discovering and classifying sensitive data integrated with a comprehensive set of data protection connectors to encrypt or tokenize data to reduce business risk and satisfy several compliance regulations.
Secrets Management: Centrally manage Symmetric and Asymmetric Key types as well as secret data and certificates (along with associated policies).
Self-service Licensing: Streamlines provisioning of connector licenses through a new licensing portal. The new management console offers better visibility and control of licenses in use.
Multi-tenancy Support with Separation of Duties: Provides capabilities required to create multiple domains to support large organizations with distributed locations or multiple companies hosted by Managed Service Providers (MSP).
Developer Friendly REST APIs: Offers new REST interfaces in addition to KMIP and NAE-XML APIs, for developers to simplify deployment of applications integrated with key management capabilities and automate testing and development of administrative operations.
Flexible HA Clustering and Intelligent Key Sharing: offers a choice of clustering a physical with a virtual appliance for high-availability environments to ensure optimum processing regardless of the workload location (data center or cloud).
Robust Auditing and Reporting: Includes tracking of all key state changes, administrator access and policy changes in multiple syslog formats (RFC-5424, CEF, LEEF) for easy integration with SIEM tools. In addition, customers can generate pre-configured or customizable SNMP alerts (v1, v2c, v3) as email-based alerts. Audit trails are securely stored and signed for non-repudiation.
High-speed Interfaces with NIC Bonding: NG KeySecure appliance provides optional 2x1GB/2x10GB network interface cards (NIC). NIC bonding is available to increase available bandwidth, by combining new 1G/10G interfaces to provide 2G/20G throughput.
Password and PED Authentication: Offers a stronger two-factor authentication option in addition to passwords, with a Pin Entry Device(PED) device that enables you to associate a PED PIN (something-you-know) with any PED Key (something-you-have).
