Encryption with Trusted Platform Module
Encryption provides the support to protect sensitive information in the configuration files, logs, and private keys on the file-system of the disk drives. Encryption also prevents unauthorized access to data stored in files on a disk or disk volume.
File-system encryption is supported on MX240, MX480, and MX960 devices for bulk encryption of file names, folder names, file contents, and other meta-data that operates on an entire volume. In this method, the data is automatically encrypted when written to disk and decrypted when read from it. The files are accessible immediately after the encryption key is provided.
Benefits of File-System Encryption
-
Prevents revealing of confidential information from offline attacks.
-
Provides data destruction for secure data erasure by destroying the cryptographic keys.
-
All files are automatically encrypted, by default without any user action.
File-System Encryption with Trusted Platform Module (TPM)
TPM is a chip used for the identification and authentication of a device on the network and to ensure the software loaded on the system is in the correct state when it started up. Each TPM chip is unique to a particular device. Using TPM on the device, the hard disk drive cannot be connected and accessed outside to another device. The encryption key is enclosed to the TPM 2.0 device. The data stored on the encrypted file-system is read using the encryption keys.