R&S®Trusted Disk

Full-disk encryption to protect classified data

Notebook screen showing R&S®Trusted Disk pre-boot authentication

Key Facts

Protects classified data on both, internal and mobile data media
Approved for "Nur für den Dienstgebrauch", EU and NATO Restricted
Fast roll-out to a large number of end devices
Simple administration via powerful central management system

Obtenir un devis

About R&S®Trusted Disk

The electronic processing of classified information is subject to strict legal requirements. Sensitive data must be protected from unauthorized access, and only certified IT security products with special approval may be used. The R&S®Trusted Disk hard disk and mobile data storage device encryption is approved for classified information at the "Nur für den Dienstgebrauch", EU Restricted and NATO Restricted levels. The system protects classified information from unauthorized access, loss or theft in turned off computers and during maintenance and repair of the device.

Brochure produit
Montrer tous les téléchargements

Caractéristiques & avantages

Area of use

End devices with Windows operating systems:

Notebooks, tablets and desktop PCs
PCs installed in police and military vehicles
External USB data storage devices connected to them
Windows servers

Secure encryption

R&S®Trusted Disk can encrypt internal system data and up to seven other internal data media for an end device and, if required, external USB data media. The boot process is tamper-proof with Secure Boot. The mandatory two-factor pre-boot authentication requires a user-specific smart card and the entry of a PIN. If desired, a special stealth mode can conceal the encryption by booting a parallel system without sensitive data.

Simple administration

R&S®Trusted Disk can be easily rolled out to a large number of configured end devices. User productivity is not affected, since both initial encryption and rekeying are carried out in the background. A special maintenance mode enables unattended restarts without user interaction. If user smart cards are lost, security administrators can still access the encrypted data. Data recovery scenarios are supported by a recovery tool included in the delivery.

Central management

The central management system R&S®Trusted Objects Manager considerably simplifies administration. It enables company-specific remote management of end devices, users, smart cards, groups and rights. The system can connect to LDAP directory services, such as Active Directory. Required device and user certificates to personalize smart cards can be generated with an integrated PKI and easily managed throughout their entire lifecycle. Security policies can be enforced centrally.