Entrust KeyControl Policy Agent

The Entrust KeyControl Policy Agent provides for encryption of disks, filesystems and files within a virtual machine.

There are a number of features provided in the Policy Agent, including:

  • Full encrypted path from the VM, through the hypervisor to the storage.
  • Support for cloning and replication.
  • Dynamic rekey on Windows and Linux, allowing initial encryption or rekey without taking the VM or applications offline.
  • Filesystem resize for encrypted devices.
  • Support for Amazon S3 storage.
  • Linux file-level and folder-level encryption.
  • Migration of encrypted disks between VMs in the same Cloud VM Set.
  • Support for Windows failover clusters.
  • Root and swap encryption for Linux and boot drive (C:) encryption for Windows.