Trusted Computing Group

About a year ago, Trusted Computing Group released the Opal Security Subsystem Class Specification for PC clients and the Enterprise Security Subsystem Class Specification for data center storage (http://trustedcomputinggroup.org/developers/data_protection). These specifications provide a blueprint for hard disk drives, solid state drives and other storage devices that enable stronger data protection, help organizations comply with increasingly tough regulations and help protect important information from loss and theft.

 

Self-encrypting drives encrypt data on the fly in hardware, transparent to the user and system. If drives are lost or stolen, data is unavailable except to the authorized user. Drives can be very quickly and completely erased, making re-use or disposal efficient and safe.

 

Now, we are beginning to see real market momentum around these specifications. A number of vendors have developed products that support these specifications and are beginning to be deployed.

 

Products that support the TCG Opal SSC (Security Subsystem Class) used primarily in client (notebook and desktop) applications include:

 

• Hitachi GST, http://www.hitachigst.com/portal/site/en/products/self-encrypting/

• Samsung solid state drives, http://www.samsung.com/global/business/semiconductor/products/flash/ssd/2008/down/SSD_datasheet_6-09.pdf

Software to manage drives includes:

• CryptoMill, http://www.cryptomill.com/documents/SEAhawk_Product_Features_-_Self_Encrypting_Drives.pdf

• Guardian Edge, http://www.guardianedge.com/products/guardianedge-encrypted-drive-manager.php

• Wave Systems, http://www.wave.com/products/eras.asp

Embassy Trusted Drive Manager - http://www.wave.com/products/eras.asp

                                                http://www.wave.com/products/tdm.asp

• WinMagic Inc.

Solutions page for self encrypting drives - http://www.winmagic.com/solutions/self-encrypting-hard-drives
SecureDoc FDE - http://www.winmagic.com/products/full-disk-encryption
SecureDoc for Mac - http://www.winmagic.com/products/full-disk-encryption-for-mac
SecureDoc Enterprise Server - http://www.winmagic.com/products/enterprise-server-encryption

 

On the enterprise/data center side, products are starting to emerge that support the TCG Storage Work Group's Enterprise SSC (Security Subsystem Class). These include:

 

• Hitachi GST, http://www.hitachigst.com/portal/site/en/products/self-encrypting/
• Seagate Technology, http://www.seagate.com/www/en-us/products/servers/savvio/

Seagate Secure: Drives get around. Data shouldn't, http://www.seagate.com/ww/v/index.jsp?locale=en-US&name=dn_sec_landing vgnextoid=82cbe6f068d2d010VgnVCM100000dd04090aRCRD

 

Products:

Seagate Enterprise SED drives:

http://www.seagate.com/www/en-us/products/self-encrypting-drives/

 

Seagate Laptop SED drives:

http://www.seagate.com/www/en-us/products/laptops/momentus/momentus_7200_fde
http://www.seagate.com/www/en-us/products/laptops/momentus/momentus_5400_fde/

 

On the PC side, vendors such as Dell are making the Opal drives available in their business PCs.