High Density Devices

[hiddn]™ Key Management System (KMS)

The [hiddn]™ Key Management System (KMS) is a proprietary administrative utility for managing lifecycle functions of [hiddn]™ Key Tokens (smartcards) and accompanying [hiddn]™ products. Designed for enterprise crypto managers, system integrators, sales partners, IT-management, and other entities deploying [hiddn]™ products, the KMS is delivered as a dedicated workstation running on a Windows platform (Win7, backwards compatible).

Key features

Key features of the [hiddn]™ Key Management System include:

• Management of Key Token lifecycle
  • Issue
  • Escrow
  • Revoke
  • Replace
• Management of the Crypto Officer role
• Import of keying material
• Import of user data (direct from database)
• Log and audit key management transactions
• Setting resident Crypto Module key
• Setting interactive pre-boot authentication key
• Configuring multi-user set-ups with shared or individually encrypted partitions

Detailed Description

The Key Management System's main function is the management of User smaartcards containing the Media Encryption keys. The KMS logs the transactions of all Key Tokens and their assigned users in an intelligent and logical user interface.

The Key Management System also administrers release of Crypto Officer Keys. Crypto Officer Keys are neccesary for configuring [hiddn]™ products. This includes the setting of the preshared communication keys, which limits access to only User smartcards sharing the same communication keys.

KMS can easily create backup User smartcards, if the original should ever be lost. THe new, BAckup smartcard, will as such effectively block all former smartcards, as part of a strict security regime. In case of compromised Key Tokens, the Key Management System handles the revoking and creation of Replacement Key Tokens. In a high security environment, KMS can aid in the creation of a new set of Key Tokens for replacing all the cryptographic assets and assist in re-encryption of the entire contents of the storage media.

KMS also offers the operator access to the advanced features of the [hiddn]™ Crypto Module such as encryption of a disk on partition/sector level, thus offering a seamless solution for multi-user scenarios.