Full Disk Encryption Policies - Online Help Home - Trend Micro

Trend Micro Endpoint Encryption 3.1.3 Administrator's Guide
About Endpoint Encryption
1-2
Trend Micro Endpoint Encryption is a fully integrated hardware-based and softwarebased
encryption solution to protect laptops and desktops, files and folders, removable
media, and encrypted USB drives with embedded anti-malware/antivirus protection.
With Endpoint Encryption, Administrators can use a single management console to
flexibly manage a combination of hardware and software-based encryption with full
transparency for end-users.
Trend Micro Endpoint Encryption ensures end-to-end data protection by providing
FIPS 140-2 encryption of the data residing on the management server; all data
transmitted to/from the server; all data stored on the endpoint device; and, all locally
stored client logs.
Using FIPS 140-2 accredited cryptography, Endpoint Encryption offers the following
benefits:
• Comprehensive data protection through fully integrated full disk, file, folder, USB
drives, and removable media encryption.
• Centralized policy administration and key management through a single
management server and console.
• Device management through device-specific information gathering and remote
lock, reset, and the capability to wipe all endpoint data.
• Advanced real-time reporting and auditing to ensure security compliance.
Endpoint Encryption Components
Endpoint Encryption consists of one central management server (PolicyServer Web
Service) that manages the policy and log databases (MobileArmor DB), LDAP
authentication with Active Directory, and all client-server activity. Endpoint Encryption
clients cannot interface directly with PolicyServer and must connect through the Client
Web Service. For an illustration of this architecture, see Figure 1-1: Endpoint Encryption
Client-Server Architecture on page 1-3.