Data Sheet: Encryption

Symantec Endpoint Encryption Removable Storage Edition

Protects data on removable storage and removable media

Removable storage devices are now common in offices Key features

everywhere—and anywhere that today’s mobile workers • Prevents unauthorized access to information on lost or
go. The proliferation of inexpensive USB thumb drives, stolen removable storage devices
portable hard drives, MP3 players, iPods, digital cameras,
• Helps achieve compliance with governmental data
mobile phones, PDAs and CD/DVD burners puts
protection directives and regulations
organizations’ data and business at risk.
• Automatic, on-demand, and content-driven encryption of
Symantec Endpoint Encryption Removable Storage Edition removable storage
addresses the operational issues that enterprises encounter
• Extensive device and media support, including external
when deploying a solution to protect data on removable
hard drives, flash drives, CD/DVD media, floppy drives, and
storage devices from the loss or theft of a device, enabling
flash memory modules
organizations to benefit from the productivity gains associated
• Built-in CD/DVD burning application for creating
with removable storage without putting data at risk.
encrypted optical media
Symantec Endpoint Encryption Removable Storage Edition
• Optional Access Utility for seamless access on systems
solution is flexible–delivering the capability to encrypt data
without client software, such as home computers or
by policy on any storage device or media, allowing employees
business partner systems
to safely transport and use data on portable media, and to
• Password or smart card–based authentication
securely distribute data via email. To speed adoption and
acceptance, enterprises also need to ensure a non-disruptive • Policy-based control for file type and device exclusions
user experience that protects data while having minimal • Self-decrypting archives for secure, one-way distribution
impact on the way employees work. Symantec Endpoint of encrypted files
Encryption Removable Storage Edition delivers this with
• Streamlines deployment and notification with the
capabilities such as shared workgroup keys that require no
included Integration Component for the Symantec
user intervention when data is written, and options for user
Management Platform
registration that require little or no user interaction.
• Optional integration with Symantec DLP for Endpoints
To minimize deployment, management, training, rollout
• FIPS 140-2 validated, Common Criteria EAL4+ validated,
and support requirements, Symantec Endpoint Encryption
and Section 508 compliant
Removable Storage Edition makes maximum use of existing
• Includes Microsoft Active Directory-integrated enterprise
infrastructure through its native Microsoft® Active Directory™
management console
integration as well Novell eDirectory™ support within a
single management console. By leveraging accepted and • Supports Microsoft Active Directory, Novell eDirectory,
proven enterprise software industry standard technologies, and non-domain endpoints
Symantec Endpoint Encryption Removable Storage Edition • Provides extensive built-in compliance reporting with a
makes endpoint data protection across the enterprise custom report generator
simple to deploy and cost-effective to manage.

Page 1 of 3
Data Sheet: Encryption
Symantec Endpoint Encryption Removable Storage Edition

Technology Overview CD/DVD Support

Symantec Endpoint Encryption Removable Storage Edition • Encrypt data written to CDs and DVDs
delivers enterprise-class encryption designed to safeguard • Native CD and DVD burner–can replace other CD and DVD
sensitive, private and legally protected data from loss on burning software
removable storage devices and media that connect to
laptop and desktop PCs. Encryption
• 256 or 128-bit AES encryption
Secure data portability is a critical requirement for successful
• Granular file-level data encryption policies
use and deployment of any enterprise implementation of
removable storage and removable media encryption. Included • Support for password or digital certificate user
with Symantec Endpoint Encryption Removable Storage authentication keys
Edition is the capability to deploy by policy the Symantec • FIPS 140-2 validated cryptographic library
Endpoint Encryption Access Utility, allowing data to be
securely encrypted and decrypted from computers without Authentication to Encrypted Data

Symantec Endpoint Encryption software, making it possible • Administrative master recovery certificate
for users to easily take work home, while protecting data • Password
should the device be lost or stolen. Another key safeguard
• Token/smart card (with Advanced Authentication)
that drives productivity while protecting data is the capability
• Workgroup keys for seamless access to data by members
to create self-extracting encrypted file archives, making
of the same workgroup
possible secure one-way distribution and group access
models such as e-mail distribution, FTP and shared server use. Self-extracting Archives
• Easily distribute encrypted data on storage devices, FTP
Specifications sites, shared server volumes and through e-mail
Supported Ports/Media
• Access data via password entry or smartcard authorization
• USB-based removable storage (including flash drives and
without requiring additional software
external hard drives), FireWire-based storage, floppy disk
drives, CD and DVD discs Symantec Endpoint Encryption Access Utility

• Enables access to encrypted data on Windows and

Supported Devices
Mac OS X computers without Symantec Endpoint
• Flash media, including Secure Digital, CompactFlash,
Encryption Removable Storage Edition installed
MMC, and more
• Resides on removable storage media, requires a very
• Memory sticks and thumb drives
small footprint
• Internal and external floppy disk drives
• Complete read/write access to encrypted files
• CD and DVD writers
Key and Password Administration and Recovery
• External hard drives
• Recovery of encrypted data in the event of lost tokens
• All devices recognized as removable storage by Windows
or passwords

Page 2 of 3
Data Sheet: Encryption
Symantec Endpoint Encryption Removable Storage Edition

Client Platforms Manage endpoint data protection for all PCs from a single

• Windows 7 (x86 and x64) console—Also supports Novell eDirectory and non-domain PCs

• Windows Vista (x86 and x64) Proven ease of operation—Highest deployment success rates

• Windows XP (x86 and x64) and millions of licenses deployed

• Windows 2000 Single console administration—common management for

• Windows Server 2003 and Windows Server 2003 R2 (x86) Symantec Endpoint Encryption products

Windows Server 2008 and Windows Server 2008 R2 (x86 Non-disruptive to end users—Minimally intrusive,
and x64) transparent operation and deployment

• Mac OS X 10.5 and 10.6 (Intel-based) for Access Utility only

Visit Our Web Site
Management Server
[Link]
• Windows Server 2003 and Windows Server 2003 R2 (x86)
To speak with a Product Specialist in the U.S.
• Windows Server 2008 and Windows Server 2008 R2 (x86
and x64) Call toll-free 1 (800) 745 6054

To speak with a Product Specialist outside the U.S.

Database
For specific country offices and contact numbers,
• Microsoft SQL Server 2008 (x86 and x64), Express Edition
please visit our website.
with Advanced Services, Standard or Enterprise Editions

• Microsoft SQL Server 2005, Express Edition with Advanced About Symantec
Services, Standard or Enterprise Editions Symantec is a global leader in providing security, storage
and systems management solutions to help consumers and
The Symantec Endpoint Encryption Platform organizations secure and manage their information-driven
world. Our software and services protect against more risks
The only native Active Directory integration—maximum use
at more points, more completely and efficiently, enabling
of existing infrastructure and training investments
confidence wherever information is used or stored.
• Deploy and manage with existing infrastructure

• Low training and support costs, fast rollouts Symantec World Headquarters

350 Ellis St.

• Group policy object (GPO) based policy deployment,
Mountain View, CA 94043 USA
• MMC snap-in architecture
+1 (650) 527 8000
• Role-based policy administration 1 (800) 721 3934
• Detailed auditing and reporting [Link]

Copyright © 2010 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries.
Other names may be trademarks of their respective owners.
21157418
Page 3 of 3