Home > Storage > PowerMax and VMAX > Data Protection > Dell PowerMax Data at Rest Encryption > Summary
Data at Rest Encryption is an easy-to-use solution that keeps sensitive data safe from drive theft or loss by providing back-end encryption for the entire system. PowerMax 2500 and 8500 systems can use either embedded or external key management. Embedded key management allows the system to self-manage authentication keys; external key management uses the standard OASIS KMIP protocol, allowing the end user to manage keys on an external management server for centralized key storage.
D@RE incorporates other important key management components such as the Key Trust Platform, Dell BSAFE cryptographic library, and the lockbox. The PowerMax systems also offer encryption during a vaulting operation in the event of a system power down, securing all cached data. Through these components, D@RE offers key protection, recovery, and integrity to ensure the security of all sensitive data.