Archive for the ‘ECLYPT Protects’ Category

ECLYPT Tablet – SST SCT1150E Dell Venue

Wednesday, September 17th, 2014

ECLYPT Core 600 Drives are CAPS evaluated to protect and hold up to TS Data.

SST have designed a housing, that can hold an ECLYPT Core 120GB rotating or 128GB / 256GB / 512GB Solid State Drive.

Dell Venue Tablet Protected by ECLYPT Core Drive


SST integrate an ECLYPT Core encrypted drive into the back of a Dell Venue 10.8 inch tablet. A special ECLYPT Core PAE (Pre-Authentication Environment) is provided by ViaSat that allows touch screen entry of the username and password.


If the password and USB user token is correct, the Tablet is successfully authenticated and the Windows 8.1 OS is booted allowing full touch screen functionality.

For For further information on ECLYPT Tablet Encryption, just email robert.palmer@viasat.uk.com

Disclaimer: This blog is written by Robert Palmer, an employee of ViaSat UK Ltd, but the views and opinions expressed on this website are those of the author, and do not necessarily represent the views and opinions of ViaSat

ECLYPT Tablet – Panasonic FZ-G1

Wednesday, March 19th, 2014

ECLYPT Core 600 Drives are CAPS evaluated to protect and hold up to TS Data.

EuroTempest have designed a housing, that can hold an ECLYPT Core 120GB rotating or 128GB / 256GB / 512GB Solid State Drive, for the back of the Panasonic FZ-G1 10.1 inch Windows tablet, with a choice of Windows 7 or Windows 8 as the operating system. A tempest protected verison is available.
FZG1BackS
The Panasonic FZ-G1 allows entry of a username and password into it's touch screen BIOS (without an external keyboard). This is transferred into the ECLYPT Core Drive's PAE (Pre-Authentication Environment) using the buttons below the screen .
FZ-G1 BIOS Keyboard
If the password and USB user token is correct, the FZ-G1 is successfully authenticated and the Windows OS is booted allowing full functionality through the touch screen keyboard.

The FZ-G1 can also be dropped into adocking station to provide access to your desktop display and keyboard.

Panasonic Docking Station Showing ECLYPT Fitted to FZ-G1

Panasonic Docking Station Showing ECLYPT Fitted to FZ-G1 Tablet

For For further information on ECLYPT Tablet Encryption, just email robert.palmer@viasat.uk.com

Disclaimer: This blog is written by Robert Palmer, an employee of ViaSat UK Ltd, but the views and opinions expressed on this website are those of the author, and do not necessarily represent the views and opinions of ViaSat

ECLYPT works with Windows 8

Wednesday, March 19th, 2014

ViaSat UK have tested ECLYPT Core with the current version of Windows 8 operating system, both 32 bit and 64 bit versions, and all types of KeyStone Tokens (F and H) . All these tests were successful.

There is talk of Windows 8 working without a BIOS using UEFI, so ViaSat UK even have a solution for this combination, even though they have not found many computers that rely on this method yet.

For further information just email robert.palmer@viasat.uk.com
Disclaimer: This blog is written by Robert Palmer, an employee of ViaSat UK Ltd, but the views and opinions expressed on this website are those of the author, and do not necessarily represent the views and opinions of ViaSat

My ECLYPT Drives

Tuesday, March 18th, 2014

To secure my data I use:
1. A Dell E6400 ATG Laptop with an ECLYPT Core replacement encrypted hard drive show below (1). This is secured inside the laptop, so a casual observer will not know it is there, with tamper evident labels applied over the drive bay cover. Dell E6400 ATG Laptop showing its internal ECLYPT Core Encrypted Drive	Dell E6400 ATG Laptop showing its internal ECLYPT Core Encrypted Drive

In my desk:
2. To back-up my laptop (in reality my ECLYPT Core encrypted drive) I use the ECLYPT freedom portable drive (2), shown below in its silicon sleeve. It is connected to my laptop with the black USB cable (3). Removal from the USB Cable makes it instantly secure.
4. To transfer small files I use my ECLYPT nano USB 2GB memory stick drive. The ECLYPT nano is a miniaturised ECLYPT freedom drive that just plugs directly into the USB Port.
5. ECLYPT Setup CD (5) NPM contains:

  • the user manual - just load into any computer's CD drive to read
  • Setup Utilities
  • The ECLYPT Management Application (EMA) Programme to manage all your ECLYPT Drives.
  • On its front face the telephone number of the ViaSat UK free support helpline:
  • +44(0)1929 55 44 00 Option 2

My desk drawer showing my ECLYPT freedom, ECLYPT nano and the ECLYPT set up and manual CD

In my pocket:
6. A KeyStone USB Token - that contains a digital password - to separate it from the ECLYPT Core protected laptop (1), the ECLYPT freedom portable drive (2) and the ECLYPT nano USB drive (4).
It authenticates the three ECLYPT drives (1)(2)(4), so I only need to carry a single KeyStone Token.
All KeyStone Tokens are NPM, so they require no further protection, when kept in my pocket - whether worn or in my wardrobe.
KeyStone User Token in Pocket

For further information just email robert.palmer@viasat.uk.com

Disclaimer: This blog is written by Robert Palmer, an employee of ViaSat UK Ltd, but the views and opinions expressed on this website are those of the author, and do not necessarily represent the views and opinions of ViaSat

ECLYPT Drive Set Authentication – Getac X500 Servers

Friday, January 3rd, 2014

ViaSat UK's PAE2 (Pre-Authentication Environment) functionality allows several ECLYPT Drives to be:

  • grouped in a Drive Set;
  • so multiple ECLYPT Drives can be authenticated together by
  • a single password      (and single token for Core 600)
  • Getac X500 Server with 6 x ECLYPT Core Drives
  • The Getac X500 Server with an expansion bay, with 5 drives, has been sucessfully tested with 6 x 512GB ECLYPT Core Solid State Drives
  • providing 3 terabytes of Storage
  • with RAID options available.

For For further information on multiple ECLYPT Core Drives Protecting Servers, just email robert.palmer@viasat.uk.com

 Disclaimer: This blog is written by Robert Palmer, an employee of ViaSat UK Ltd, but the views and opinions expressed on this website are those of the author, and do not necessarily represent the views and opinions of ViaSat

ECLYPT can protect Macintosh Computers

Wednesday, March 13th, 2013

Current data at rest encryption (including all other CESG approved competitors) relies on BIOS interupt. The latest ECLYPT version however can be configured to utilise the UEFI. Both Macintosh and Windows 8 use this interface.

So ViaSat UK can now provide ECLYPT Core Drives to protect 64 bit Macintosh Computers running Mac OS X versions 10.4 Tiger, 10.6 Snow Leopard, 10.7 Lion, 10.8 Mountain Lion and 10.9 Mavericks.

Current ECLYPT version 34 drives can be configured to protect Macintosh Computers:

  • So current ECLYPT Core 200 , FIPS validated, are ready to be protect Macintosh. They are being evaluated by several clients.
  • CESG Approved ECLYPT Core 600 / 300 hardware can be configured to protect Macintosh Computers (the configuration is currently under CESG evaluation)
  • Macintosh Computer Showing ECLYPT authentication screen
  • Macintosh computers can also be securely backed up onto ECLYPT freedom Drives

For further information on ECLYPT Core Hard Drives protecting Macintosh Computers, just email robert.palmer@viasat.uk.com

Disclaimer: This blog is written by Robert Palmer, an employee of ViaSat UK Ltd, but the views and opinions expressed on this website are those of the author, and do not necessarily represent the views and opinions of ViaSat

Skyfall with ECLYPT = no film

Monday, November 5th, 2012

The latest James Bond film starts with the theft of a laptop hard drive.

Watching Skyfall should be compulsory for all managers responsible for data security - it shows the range of threats and corresponding attacks.

If the list was stored on an ECLYPT Core Drive the data on the stolen drive would have been secure and 007 would not have to retrieve it - so the Sam Mendes would be filming another plot.

However if MI6 used one of ViaSat UK's software competitors solutions, the list would have still been compromised.

  1. Ripping out the hard drive, made it obvious that it was tampered with, however:
  2. a professional spy would have removed the valuable drive with a screw driver and performed a disk copy.
  3. 'M' would not have even known, but
  4. if an ECLYPT Core Drive was used the theft would have been obvious, so the imbedded agents could be withdrawn.
  5. Also the ECLYPT Core Drive's tamper respondant layer would have destroyed the decryption electronics.
  6. So with ECLYPT Core Drive no film no compromise

For further information just email robert.palmer@viasat.uk.com

Disclaimer: This blog is written by Robert Palmer, an employee of ViaSat UK Ltd, but the views and opinions expressed on this website are those of the author, and do not necessarily represent the views and opinions of ViaSat

ECLYPT RAID Installation in Getac B300

Monday, October 24th, 2011

ECLYPT supports software RAID, including Microsoft's built in RAID in Windows 2003 Server.
GETAC B300+ECLYPT Encrypted Drive+ECLYPT Encrypted Drive=RAID 1

ViaSat UK tested and proved this on a Getac B300 where they installed 2 x ECLYPT 120GB Core 600 Drives:

  • Disk0 into the standard drive bay (on right hand side of the B300) and
  • Disk1 in the CD RoM Drive bay caddie adaptor (on left hand side of the B300).
  1. The GETAC B300 BIOS setting: SATA controller was changed to compatibility mode.
  2. Windows Server 2003 was installed on Disk0.
    BIOS update (R1.19.070520d) was loaded and updated using win 98 boot disk.
  3. Downloaded Getac drivers from Web site - as you need to ensure that the Chipset and RAID drivers are installed to enable the ECLYPT Drives to be seen by the Windows operating system.

Upon simulating a Drive failure - by removing Disk0 turning the power back on - and after authenticating the other ECLYPT drive it automatically booted from Disk1, proving that not only
can 2 ECLYPT Drives operate as a RAID 1 but that the RAID 1 recovery also works.