SecureCloud™ version
3.6 provides the following new features:
-
Legacy SecureCloud Agent Provisioning
This feature allows users who have existing registered devices with the version
2.0 or 3.0
SecureCloud Agent to maintain their legacy
environments, but still provision and encrypt new volumes attached to those
devices with
SecureCloud
3.6. Refer to
Managing Devices on Legacy SecureCloud Agents for more information.
-
Format-Erasing Encryption
In previous versions of
SecureCloud, when a user encrypted a data volume,
SecureCloud erased all
of the data form the volume before encryption.
SecureCloud version 3.5
exclusively used "in-place encryption", which preserved data when encrypting. In
SecureCloud version
3.6, users can
choose which method of encryption they wish to do: in-place encryption or
format-erasing encryption, which is the method that the previous versions used.
Format-erasing encryption is optional, but may be faster and easier to use for
certain users. Options to preserve or erase existing data have been added to all
methods found in
Provisioning Devices.
-
Boot Volume Encryption for Amazon Web Services EC2
SecureCloud allows users to
install the SecureCloud Agent on Amazon EC2 instances and
supports encryption of the boot volumes on those instances. Refer to Preparing Amazon EC2 Instances for more information about preparing those instances for
encryption.
-
Specific Policy Rules for Amazon Web Services EC2
Policy rules have been divided into two categories:
General Policy Rules and
CSP-Specific Policy Rules.
General policy rules are rules that affect all devices regardless of what
computers or instances they are on. CSP-specific policy rules only affect
devices managed by their specific Cloud Service Providers. This allows users to
set rules that use data specific only to those CSPs. This version introduces
policy rules specific to Amazon Web Services. Refer to
CSP-Specific Policy Rules for more information.
-
Previously Encrypted Device Recognition
This enhancement allows a user to clone or move an encrypted device to another
SecureCloud Agent, or clone that device onto the
same
SecureCloud Agent, without needing to import the
encryption key. Refer to
Previously Encrypted Device Recognition for more
information.
-
Static IP Address Support for Boot Volume Encryption
SecureCloud supports boot volume encryption for
boot configurations that use either dynamically assigned IP addresses or static
IP addresses. The SecureCloud Agent detects the network
settings of the main operating system and applies them to the pre-boot operating
system. The SecureCloud Agent also updates these
settings when agent starts or stops.