Runtime Agents Parent topic

A SecureCloud runtime agent (commonly referred to as SecureCloud agent or agent) is a software application installed on supported systems to allow encryption of target disk drives. Agents provide the following functionality:
  • Checks the integrity of the cloud environment against the rules set in the SecureCloud policy for the specific virtual machine and device
  • Mounts a configured encrypted data storage device
  • Establishes an SSL session with the SecureCloud key manager
  • Establishes a private session with a separate session key over SSL. This is performed in case the SSL connection is compromised. In doing so, even if the SSL session is compromised the communication between the agent and key server is still encrypted.
  • Authenticates the communication between the Runtime Agent and Key Manager using Message Authentication Code.
  • Creates and tears down an encrypted area on the virtual machine storage in order to store the cloud service provider’s credentials
Agent service
A Windows process (C9AgentSvc.exe) or Linux Daemon (scagent) that reads configuration settings, communicates with the Key Management Server, and invokes other agent processes.
Trend Micro Encryption Module
A FIPS 140-2 certified crypto engine, providing Full Disk Encryption (FDE) to your physical, virtual, or cloud environment for SCSI, iSCSI, IDE, and NFS storage devices.
Configuration Tool
Installs the runtime agent and provisions a device for encryption.