Secure your data with HPE StoreOnce

[StorageExperts]

By Ashwin Shetty, Product Marketing, HPE Storage

Data is a double-edged sword. It can create a lot of business value—but it also represents significant liability. As we speak, your organization is gathering data faster than ever from many different sources. Keeping pace with this unprecedented data growth poses a huge challenge. The bigger challenge lies in securing the data so that it can be effectively utilized without fear of unauthorized access or data loss.

Any breach in data security can severely damage the reputation and performance of your company. Client information, payment data, personal files, bank account details, etc. are some examples of data sets that can be hard to replace and potentially dangerous if it falls into the wrong hands. Data lost due to disasters such as a flood or fire is crushing, but losing it to hackers or a malware infection is catastrophic to any business. Consider some of the high-profile reports of data loss like, for example, the 2009 hacking of TJX that cost the company more than $170 million. Not to mention increasing levels of government legislation concerning data security. It’s now wonder your company is looking to encrypt your data.

Protecting your backup data is just as important as protecting your primary data. So how can HPE StoreOnce help protect your business?

The HP StoreOnce Security Pack software is easy to install and manage providing all the security features needed to keep your backup data secure and protected. It provides for data-at-rest and data-in-flight encryption, along with Secure Erase. These functions can be flexibly configured on an application or store basis and are not restricted to configuring the whole appliance like some products. HP StoreOnce Security Pack is available for all HP StoreOnce Backup products, whether physical or virtual.

Let’s dig a little deeper into these Security Pack features:

Data-at-rest encryption

• Meets compliance needs using industry standard Advanced Encryption Standard (AES) 256  encryption algorithm
• Standard FIPS 140 -2 level 1 capable
• Protects against unauthorized access of data and against access to drives that have been lost, stolen or replaced
• Delivers software-based encryption with virtually no performance impact

Also, local key management means you avoid losing your data if you lose the key. This provides enhanced security that allows you to have one key per data store, and all the keys are encrypted and stored within the StoreOnce device to ensure they don’t get lost.

Data-in-flight encryption

• Utilizing IPSec, data-in-flight encryption delivers secure data transfer over the LAN/WAN between StoreOnce appliances, either physical or virtual.
• Provides secure data transfer over the WAN between the client and the StoreOnce appliance.
• Offers protection against unauthorized access to data transferred between StoreOnce appliances.

HPE StoreOnce Secure Erase (data shredding)

• Delivers leading industry-standard compliance with NIST SP 800-88 standards.
• Provides protection against recovery of deleted data by allowing you to securely erase confidential information. This is especially important when you are using Virtual Machines and need to repurpose your hardware or spin down VMs.
• Secure Erase gives you an option to securely erase all the data from the device or only delete the individual data store that needs to be removed.

Data integrity too

Along with these features, HP StoreOnce systems implement a multi-layered approach to data integrity—checking the data constantly throughout its lifecycle for both detection and correction of data errors. HP StoreOnce Integrity Plus is a set of features embedded in the StoreOnce solution to ensure that data can be written and restored back without corruption.

So you can see how HPE StoreOnce Security Pack makes it easy for you to ensure that your backup data is safe and secure, not only for now, but into the future.

Learn more

HPE StoreOnce data sheet

HPE Integrity Plus technical white paper