2020 2019 PRODUCT UPDATE WEBINAR SvKMS 2.5 DELIVERING ENHANCED - - PowerPoint PPT Presentation

MAKING THE COMPLEX SIMPLE

2019

MAKING THE COMPLEX SIMPLE

2020

CONFIDENTIAL

PRODUCT UPDATE WEBINAR SvKMS 2.5

DELIVERING ENHANCED DATA PROTECTION THROUGH NEW INTEGRATIONS

PRESENTERS & AGENDA

BRUCE KORNFELD Chief Marketing & Product Officer PAUL LECHNER Senior Product Manager KYLE WUOLLE Senior Engineer

2

Solution Overview BRUCE Release Information & Integrations Demo PAUL & KYLE Q&A BRUCE & PAUL

3

• Virtualized key

management for any environment

• Flexible: Keys for the

datacenter, cloud, or edge

• Robust: Functionality at

a surprisingly low cost

• Simple: Centralized,

single pane-of-glass

INTRODUCING SvKMS

4

ANY ENVIRONMENT, ANY WORKFLOW

• Deploy key management anywhere
• High availability without boundaries
• Integrate with any workflow

Datacenter DEPLOY STORE & MANAGE Edge Sites

SERVER and STORAGE

Cloud

5

WHAT IS BEING ANNOUNCED?

• New integrations with Cloud providers for

external key management

• New integration with Thales Luna HSM
• New integration with Salesforce
• New integration with Microsoft

BitLocker

CONFIDENTIAL

6

NEW CLOUD INTEGRATIONS

ELIMINATE DEPENDENCY ON CLOUD PROVIDERS FOR KEY CREATION AND MANAGEMENT

• Separate “Lock and Key”
• Azure External HSM BYOK

SvKMS manages keys in your own HSM or in SvKMS for any Azure Key Vault application

• Google External Key Manager (EKM)

SvKMS creates and manages keys for Google encrypted services

• Amazon AWS

Continued support for AWS S3 and EC2 using a similar BYOK approach

CONFIDENTIAL

7

AZURE EXTERNAL HSM BYOK

FEATURES

• Keys generated locally in SvKMS
• Key Vault securely stores the keys
• Customer can use any on-prem HSM or SvKMS by itself
• SvKMS manages keys and imports to Azure Key Vault
• Imported keys operate the same way in Azure Services

BENEFITS

• Added layer of protection with HSM as the root-of-trust
• SvKMS supports many types of HSMs unlike competitors
• SvKMS is centralized key manager for all keys in the enterprise
• Gain access to

Azure services reserved for their own key manager

CONFIDENTIAL

8

FEATURES

• Added option for protecting data in Google Cloud
• Use customer created keys from SvKMS
• Protect all data within Google Cloud
• BigQuery or Compute Engine
• Cloud Key Management Service API
• Simply grant the Google Cloud project access to use the key

BENEFITS

Key provenance:

• Customer controls the location

and distribution of keys

• Keys are never cached or

stored within Google Cloud Access control:

• Customer manages access to

all keys Centralized key management:

• Manage keys and access

policies from a single location and user interface

• Encrypted data can be

anywhere - any cloud or on premise

GOOGLE EXTERNAL KEY MANAGER (EKM)

CONFIDENTIAL

9

BENEFITS

• Adds root-of-trust (hardware) key protection

to SvKMS

• Ability to offer FIPS 140-2 Level 3 protection
• Add key lifecycle functionality to the Luna

HSM

THALES LUNA HSM

FEATURES

• SvKMS is integrated with Thales Luna

HSM

• One of the most widely used HSMs
• SvKMS extends HSM features - key

lifecycle, rotate, backup, revoke, etc…

CONFIDENTIAL

BENEFITS

• T

ake advantage of Salesforce Shield encryption for data protection

• Maintain control of your encryption keys

10

FEATURES

• Salesforce Shield allows organizations to

encrypt their SF applications

• Generate and store your own key material

with SvKMS

SALESFORCE BYOK

CONFIDENTIAL

11

BENEFITS

• Give power to admins to control and revoke keys
• Solve the issue of losing backup keys
• Eliminate clunky backup method such as USB keys
• Ensure workforce has strong protection on their PCs

BITLOCKER

CONFIDENTIAL

FEATURES

• Encrypt drives on Windows laptops and desktops
• Manage encryption keys with SvKMS centrally
• Addresses threats of data theft/exposure

from lost, stolen, or inappropriately decommissioned computers

IN SUMMARY: SvKMS 2.5

12

CONFIDENTIAL

Delivering enhanced data protection for the cloud Integrate any HSM into Key Vault and extend to other Azure services Use external encryption keys from Google with EKM Extend full key lifecycle functionality to Thales Luna HSMs Enable Salesforce encryption and store keys separately Secure and control your BitLocker keys

NEXT STEPS

13

NEXT STEPS

Schedule a live demo Email sales@stormagic.com Visit stormagic.com/request-a-quote Request a quote Visit stormagic.com/trial Download a free trial Further information and documentation Visit stormagic.com

CONFIDENTIAL