The SecureCloud Agent is a software application that is installed on a virtual or physical machine that communicates with the Key Management Server and provisions devices.

Administrators must configure the SecureCloud Agent so it can communicate with the Key Management Server. Administrators can configure the agent using the Configuration Tool (both Linux and Microsoft Windows) or the Encryption Wizard for Microsoft Windows.

After configuration, the SecureCloud Agent submits an encryption key request to the Key Management Server. This request may be manually or automatically approved, depending on which policy is assigned to the machine on which the agent is installed. Once the Key Management Server issues the encryption key, the SecureCloud Agent can use the key to provision (encrypt) any devices attached to the machine.

Administrators can enable auto-detection and auto-provisioning for a machine. When auto-detection is enabled the SecureCloud Agent automatically updates the inventory whenever a new device is attached to the machine. When auto-provisioning is also enabled, and a partitioned and formatted device is attached, the SecureCloud Agent automatically provisions the device.