SecureCloud applies real-time whole-volume encryption
to protect disk drives of physical and virtual computer environments.
This is done through the following components:
-
Key Management Server—the Trend Micro- or
other Managed Service Provider-hosted server, which provides SecureCloud
functionalities (key generation and approval, log collection, account
management, localization settings, and reporting).
-
Encryption key—secure storage and transfer of
the credentials and data
-
Runtime Agent—a software application installed
on your virtual or physical system.
-
Web console—provides options to configure options
for SecureCloud agents
The encrypted drives are not immediately available when the system
starts up—but can be accessed only after the encryption key is approved
and delivered. The encryption key required to access the data is
stored on Trend Micro servers hosted in various locations including
the different geographic regions to help prevent encrypted drives,
its data, and corresponding encryption keys from being compromised.