Fortanix Inc., the
Runtime Encryption
company, announced that its
Self-Defending Key Management Service
(SDKMS) has earned the Level 1 certification of the Federal Information
Processing Standard (FIPS) Publication 140-2, a U.S. government
computer
security standard used to approve
cryptographic modules. Users now have confidence that Fortanix has
passed strict government requirements, validating SDKMS's ability to
maintain the confidentiality and integrity of protected information.
"At O.C. Tanner,
security is our highest priority," said Niel Nickolaisen, Senior VP and
Chief Technology Officer, O.C. Tanner. "Fortanix offers an unmatched
level of security that applies to our on-premises
and cloud infrastructure. Now, with FIPS Level 1 validation of its
Self-Defending Key Management Service, we are delighted that SDKMS is
compliant with the federal norms and our data is encrypted with maximum
security. FIPS can be a very effective tool when
dealing with regulators."
SDKMS is also the industry's first commercial software product built
using Intel Software Guard Extensions (Intel
SGX) to
achieve FIPS Level 1 certification. In addition to giving users
U.S.-backed certified confidence in the cryptographic security measures
of SDKMS, the certification helps
in the regulatory compliance measures of some customers, including
those in the federal, financial services and healthcare sectors.
"FIPS Level 1
certification is a significant achievement for Fortanix, particularly
for compliance for federal and other regulations that are important to
customers,"
said Ambuj Kumar, Co-Founder and
CEO of Fortanix. "Users and partners alike have the assurance that
Fortanix protects data in use and cloud data that is now backed by the
U.S. government."
Fortanix is
solving today's cloud security and data privacy problem. By decoupling
security from the infrastructure, Fortanix removes complex and
intractable security challenges experienced with current
solutions. Running applications in protected enclaves enables a new
level of deterministic security on premise, in hybrid environments, and
even on remote clouds, protecting data even when systems are
compromised.
Some components of
SDKMS are already FIPS Level 3 certified, while Level 3 certification
for the Fortanix hardware is currently underway.