HP Strengthens Security Portfolio with New Disk Encryption and Key Management Solutions

DALLAS, HP today announced new disk encryption features and improvements to key management for tape libraries, enhancing the security of business-critical data and simplifying the management of compliance-related operations for midsize to enterprise customers.

Introduced at Storage Networking World, the new hardware encryption features, added to the HP StorageWorks XP24000 and XP20000 Disk Arrays, reduce the risk of security breaches by protecting the data stored on each disk drive in the array. This is done without degrading the XP array’s high performance – a problem for competing solutions.

The encryption enhancement for disk arrays, combined with effective key management, strengthens the HP Secure Advantage portfolio of hardware, software and services designed to protect data and resources, from the desktop to the printer and the data center.

By encrypting data on both disk and tape, customers can be confident that “data at rest” – information not traversing the network – is secure and easily accessible. If disks are removed or stolen, the encrypted data is inaccessible and, therefore, protected. This encryption safeguards against loss of intellectual property and private information, and helps to protect corporate revenue and reputation.

The XP array’s redundant hardware platform with data replication capabilities ensures business continuity in case of disaster. The XP array also includes storage virtualization and thin provisioning capabilities that let customers improve the utilization of their storage capacity, the accessibility of their data, and the scalability of their storage environment.

The emphasis on storage security is largely a response to increased demands for decades-long access to archives. Tightening regulations and the increased use of content-rich applications are causing the volume of stored data to grow at an exponential rate. This makes securing archived data much more challenging.

“As regulatory compliance and privacy requirements become more stringent, efficiently protecting stored data across an entire organization requires the combination of encryption and easy-to-use key management,” said Jon Oltsik, senior analyst, Enterprise Strategy Group. “HP understands that security solutions need to evolve with growing business demands. The company’s easy-to-use encryption and central key management solutions safeguard data for extensive periods of time so security and compliance demands are always met.”

Secure key management with a single control point

HP has enhanced its Secure Key Manager (SKM) hardware solution, which automates encryption key management for HP LTO-4 enterprise tape libraries. SKM 1.1 now supports up to 2 million keys to ensure that multiple tape library installations and future encryption devices are protected.

The SKM also provides high-availability features to reduce bottlenecks during periods of high transaction volume, as well as failover capabilities to safeguard keys in case of an outage. SKM aids in meeting regulatory compliance by providing identity-based access, administration and logging; lifetime key archival; and automatic multisite key replication. The new solution has been submitted for rigorous U.S. government FIPS 140-2 security revalidation.

“Automating data security functions allows customers to fully capitalize on the critical information they need to grow their businesses,” said Bob Wilson, vice president, Storage Platforms Division, HP. “To further protect that critical information, HP has significantly increased the complexity of storage security available to mitigate risk by encrypting XP arrays and expanding key capacity on the SKM.”

More information about HP storage security is available at www.hp.com/go/encryption.

Pricing and availability(1)

Encryption for the XP24000 or XP20000 will be available in December 2008 with the option to add the encryption feature to existing disk arrays. U.S. list price will start at $23,000 and will vary depending on models and configuration.

The Secure Key Manager 1.1 will be available in December 2008 at a U.S. list price $28,500.

About HP

HP, the world’s largest technology company, provides printing and personal computing products and IT services, software and solutions that simplify the technology experience for consumers and businesses. HP completed its acquisition of EDS on Aug. 26, 2008. More information about HP (NYSE: HPQ) is available at http://www.hp.com.

(1) Estimated U.S. list prices. Actual prices may vary.

This news release contains forward-looking statements that involve risks, uncertainties and assumptions. If such risks or uncertainties materialize or such assumptions prove incorrect, the results of HP and its consolidated subsidiaries could differ materially from those expressed or implied by such forward-looking statements and assumptions. All statements other than statements of historical fact are statements that could be deemed forward-looking statements, including but not limited to statements of the plans, strategies and objectives of management for future operations; any statements concerning expected development, performance or market share relating to products and services; anticipated operational and financial results; any statements of expectation or belief; and any statements of assumptions underlying any of the foregoing. Risks, uncertainties and assumptions include the execution and performance of contracts by HP and its customers, suppliers and partners; the achievement of expected results; and other risks that are described in HP’s Quarterly Report on Form 10-Q for the fiscal quarter ended July 31, 2008 and HP’s other filings with the Securities and Exchange Commission, including but not limited to HP’s Annual Report on Form 10-K for the fiscal year ended October 31, 2007. HP assumes no obligation and does not intend to update these forward-looking statements.

© 2008 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.