NativeEdge provides data at rest encryption (DARE), which is a requirement for federal and industry regulations and ensures that data is encrypted when it is stored. DARE is provided through self-encrypting drives (SEDs) and a key management system. The data on SEDs is encrypted, and the data may not be accessed if the SED is stolen or removed from the endpoint.
Data at rest encryption is designed to prevent an attacker from accessing the unencrypted data by ensuring the data is encrypted when on disk. If an attacker obtains a hard drive with encrypted data, the data is inaccessible unless the attacker gets access to the encryption keys. Data at rest encryption is applied automatically to NativeEdge Endpoints. For PowerEdge, it does not matter if SED or non-SED drives are used. The platform automatically assures the data is secured against physical tampering or theft.
DARE uses SEDs and AES 256-bit encryption keys. The algorithm and key strength meet the NIST standard and FIPS compliance.