The MozyEnterprise service now offers another encryption key option, furthering Mozy’s commitment to data security. Mozy supports the Key Management Interoperability Protocol, at no additional cost to our customers. At this point, you’re probably asking yourself a few questions.
What is KMIP?
Key Management Interoperability Protocol—or KMIP for short—is a communication protocol that defines secure formats for the manipulation of encryption keys on key management servers (KMS). There is a general trend in enterprise IT toward the centralized management of encryption keys across multiple applications using KMS.
What does this mean to me as a customer?
Today, Mozy offers three encryption key options:
• Mozy default encryption key: Mozy assigns an encryption key to your users. This key is stored and managed by Mozy for the most seamless experience.
• Personal encryption key: The user enters a passphrase that is used to create the encryption key. Each user manually creates a unique personal encryption key.
• Corporate encryption key: The administrator enters a passphrase that is used to create the encryption key. Your Mozy admin can create a key for all users in the company or a unique one for each user group.
With the introduction of support for KMIP, Mozy now offers a fourth data encryption method. Enterprises prefer that applications using encryption keys be KMIP-compliant so they can be managed via a KMS. KMS provides a secure, single point of encryption key management across multiple IT applications.
KMIP ensures the privacy of your data. An advantage of KMS for Mozy customers is that it enables backup admins to easily create and manage per-user local encryption keys. This provides finer encryption granularity (that is, increased at-rest data security) than a corporate encryption key while retaining its on-premises advantages.
Which Mozy products include KMIP?
KMIP is now in directed availability for the MozyEnterprise service at no additional cost. KMIP is currently only supported on the Windows platform. Mac integration is coming soon. On the KMS front, KMIP is currently supported on SafeNet’s KeySecure KMS. If interested in KMIP, please reach out to us via email.