Intel® vPro™ Technology

  Section 8 of 12  

Storage Protection with Intel® Anti-Theft Technology - Data Protection (Intel® AT-d)

How Intel® AT-d Can Improve Storage Device Encryption

For a given generation of Intel® AT-d, a limited number of storage interfaces and devices may be supported. Information security objectives seek comprehensive DAR protection regardless of interface or media type. Subsequently, it may be desirable to augment Intel AT-d storage controller protections with storage device encryption. However, to maximize IT investment in DAR infrastructure, encrypting drives could utilize Intel® Management Engine (Intel® ME) service interfaces. Audit, key recovery, user authentication, and remote administration could be extended to include these devices.

Figure 21: Consolidated Intel® AT-d services
click image for larger view

Intel AT-d is more than simply an instance of storage controller encryption. It is a point of control for enterprise DAR protection that is flexible enough to accommodate the demands of an increasingly mobile workforce.

Future generations of Intel AT-d may provide some of the building blocks for a Dynamic Virtual Client (DVC) compute model in which data are streamed from a central storage service and cached locally. Intel AT-d could be used to encrypt both local cache and remote network-attached storage.

  Section 8 of 12  

Back to Top