Double key encryption solution with Microsoft Purview
- Key generation and storage inside a tamper-proof HSM
- Data is encrypted with two keys – one stored in Azure, one in the HSM
- Extra layer of security for cloud-stored data
Product Type:
FirmwareSupported Platforms:
Key Benefits
Key Life Cycle Management
Securely generate and store encryption keys with Utimaco HSMs that are FIPS 140-2 Level 3 validated, Common Criteria (CC) certified and VS-NfD approved.
Meet Compliance Standard
Meet the compliance requirements for regulations like GDPR, HIPAA, FISMA, and PCI DSS while securely protecting the keys.
Flexible Deployment
Double Key Encryption enables customers to deploy the double key encryption either on-premises or in the cloud.
Details
Sensitive data protection and controlling in Azure Cloud with Double Key Encryption
Achieve two-tier security for the most sensitive data in Azure Cloud and used in Microsoft 365. Our Double Key Encryption solution in collaboration with Microsoft Purview (formerly Microsoft 365 Compliance), complying with the regulations such as GDPR, FISMA, and eIDAS.
Double Key Encryption is ideal for:
- Protecting sensitive data on Azure cloud
- Meeting various, industry-specific compliance mandates
Security and key control with Double Key Encryption
Double Key Encryption (DKE) works on the principle of using two keys for protecting sensitive data in the cloud. One key is stored inside the tamper-proof Hardware Security Module, while another key is hosted in Azure. Should this key be compromised that is outside of customer’s control, the data re-mains secure. Without access to both keys, the relevant data remains secure-ly encrypted.
