SecureDoc is a comprehensive disk encryption product that secures data at rest (DAR). It has two main components: the client software used to encrypt and decrypt data and the server software (SecureDoc Enterprise Server or SES) used to configure, deploy, and manage encryption for an entire organization.
The SecureDoc client software uses a FIPS 140-2 level 1 and level 2 certified AES 256-bit cryptographic engine to encrypt data. WinMagic recommends that all drives be protected with full-disk encryption (FDE); container, and volume encryption can be used to supplement FDE on shared workstations to add another layer of defence for classified data, and to encrypt data on external storage devices such as USB keys, CD/DVDs, and SD cards. The SecureDoc client software provides encryption capabilities on multiple operating systems (Windows, Mac, and Linux via SecureDoc OSA).
SES enables administrators to configure, deploy, and maintain an entire organization’s data encryption requirements from an integrated management console.
Tasks administrators can accomplish through the SES management console include:
- Simplify device management with PBConnex
- Define user and device profiles
- Manage and label encryption keys
- Manage BIOS credentials with Lenovo’s integrated Hardware Password Manager
- Easily manage user access rights by synchronizing SES users and groups with Active Directory
- Enable Single Sign-On (SSO) for pre-boot authentication using Windows ID
- Monitor the status of encrypted devices
- Configure single-factor or multiple-factor pre-boot authentication requirements (password plus biometrics, PKI, token, or smart card)
- Manage and support hardware-based encryption technologies including Seagate Momentus™ DriveTrust drives, TCG Opal drives, and self- encrypting USB thumb drives
- Integrate and manage theft deterrence mechanisms such as Intel® Anti-Theft technology
“Windows Support Disclaimer: WinMagic is a Microsoft Gold Partner, working alongside Microsoft to provide integrated, reliable data protection across all your Windows deployments. Additionally, being a Microsoft WARP (Windows Application Readiness Program) member ensures that we receive previews of each release via the Azure virtual lab. Upon retrieving the new builds from the Microsoft Windows 10 Insider Preview Program, WinMagic works in-step to ensure release quality and support confidence with our products, testing each published revision (RS) update of Windows by Microsoft, and completing a set of rigorous tests to prove our technologies continually work with the Microsoft solutions that our customers use, and for which we support – meaning we’re typically able to announce support at around the same time as the general availability of the Microsoft release of new Windows updates.
While WinMagic strives to be in-sync with support timelines of any new Microsoft Windows release, any late-breaking changes implemented by Microsoft to a release, or any unresolved compatibility issues raised by WinMagic with Microsoft around a scheduled release, could create additional delays. For these rare cases, WinMagic will ensure notifications are provided (in advance) to our customers with an expected timeline for support”