Encrypting data

Forcepoint Data Security Cloud | SSE enterprise edition lets users encrypt data at rest in cloud applications at file and field level. Manage keys in the Forcepoint Data Security Cloud | SSE Keystore, or add your own Key Management Interoperability Protocol (KMIP) Key Store to use existing key management appliance/servers.

• Data is encrypted using 256-bit derived keys which are encrypted by master keys stored in Key Vaults.
• If a KMIP keystore becomes inaccessible, Forcepoint Data Security Cloud | SSE will not be able to decrypt any data encrypted by master keys stored in the keystore since the key will be inaccessible.

  It is critical that external KMS/HSM infrastructure is deployed in a redundant high-availability architecture.