DecryptNaBox platform includes many components that can enhance the product usage, ensure compliance, and add automation. At the heart of DecryptNaBox Technology is Key Decrypt Server. The Key Decrypt Server is a secure private key vault that can integrate with associated Certificate Authority to pull required private keys as needed. It provides DecryptNaBox clients with service such as Session Key Decryption and Header Modification. Clients will be able to use such services instead of relying on locally available keys.
Book a DemoKeyDecrypt provides comprehensive capabilities for key management, key extraction and migration, key protection, message session key decryption, and service management. By using modular adaptors, KeyDecrypt is configured to communicate securely with different types of key repositories, such as Microsoft and Entrust Certificate Authorities (CAs).
KeyDecrypt offers advanced key protection supporting Hardware Security Module (HSM) technology for key storage and handling, which ensures the solution meets FIPS 140-2 level 2/3 requirements. KeyDecrypt also certifies the integrity of the audit logs, and data transmitted between components of the integrated solution are protected by multi-layer encryption.
KeyDecrypt provides a message session key decryption service (SKDS) to other DecryptNaBox clients that eliminates the need for manual key recovery. The DataDecrypt component extracts the encrypted session keys from email message headers and sends them to the SKDS, which utilizes HSM-protected user private keys to decrypt session keys and messages.
Key Management Service: allows the system
to store and protect keys in a Key Vault, which can optionally utilize HSM
technology.
Key Migration Tool (KMT): allows
customers to extract certificates and keys from one source and securely import
them to the Key Vault. This allows keys and certificates to be selected and made
available to DecryptNaBox.
CA Communication Service: allows the
system to dynamically import keys from the Certification Authority or other key
repository.
Session Key Decryption Service: allows
DecryptNaBox clients to perform secure message session key decryption.
Management Service: Allows users to
manage, configure, and view reports as well as review audit data captured by
DecryptNaBox functions.
The Approval Workflow Engine component of DecryptNaBox technology automates the
decryption permissions process and the provisioning of access control. This
eliminates the need to manually manage decryption permissions and configure
access control to allow use of encryption keys.
The engine contains two
portals
Management Portal: allows designated
administrators to add or remove approval workflows, and assign administrators
who can access the portal, manage trusted CAs for use by DataDecrypt Pro, and
view reports.
Approval Portal: allows approvers to
accept or reject decryption requests made by users. Additionally, it allows
approvers to view the history of requests made in the past.
Zeva’s long and deep understanding of data decryption needs in various markets, lead to the innovation of several inline components, able to integrate with multiple environments to automate and streamline compliances and regulatory requirements.
Book a DemoDecryptNaBox can be used to decrypt all encrypted email messages sent or received and send the decrypted messages to the email archive. DataDecrypt Inline implements this process by using copies of encrypted email messages and not altering the original encrypted email messages in the email system. The copy of the email is then decrypted and sent to the archive.
MobileDecrypt provides the ability to read encrypted email messages on
mobile devices using a derived credential on the device. MobileDecrypt
extends the use of derived credentials to include encryption and
decryption for mobile devices. This eliminates the need for the mobile
user’s private key to be available on the device or accessed by the
device using a smartcard reader (e.g. an RFID Sled device).
MobileDecrypt does not require any additional software to be placed on
the mobile device, and therefore is agnostic to the device type and the
Mobile Device Management (MDM) software being used. MobileDecrypt is
implemented with Microsoft Exchange and detects the presence of
encrypted content in the email messages as it’s processed in the email
system.
Organizations that use email encryption face the possibility that
malware can be introduced into their networks through email content and
attachments. Anti-virus software running at the network perimeter
typically passes through encrypted content and attachments without
performing an inspection.
DecryptNaBox technology can be configured to temporarily decrypt
messages and attachment content, allowing anti-virus and content
inspection software to perform its function normally. Integration is
needed for the specific anti-virus or content-inspection solution in
use.
In an organization that desires the most secure email protection,
whether mandated by a government contract or due to an organization’s
competence and maturity in IT asset protection, the use of PKI S/MIME
encryption is the best choice.
Zeva’s S/MIME delegation technology allows an individual within an
organization to delegate access to their encrypted email, without
sharing their PKI encryption private key. No continuous action by the
administrative assistant or the executive is needed for this technology
to function.
In addition to delegating access to an administrative assistant, an
organization may choose to delegate access to an email archival solution
for eDiscovery or other legal pursuits. Using this technology, the email
remains encrypted at rest and can only be read by the sender,
recipients, and the email archival system.
Increasing systems like Carbon Black and Microsoft’s AppLocker are being
used to prevent malicious code from executing on a trusted system. This
software uses cryptography secured by a PKI to make informed decisions
about what code can run on a highly prized system asset.
With Zeva’s Code Signing System, your organization can operate at a
security level commensurate with some of the most trusted system in the
world today.
DataDecrypt is Zeva’s desktop software for decrypting files that have been encrypted with PKI credentials. Many organizations face challenges with managing their encrypted data when using strong asymmetric encryption.
Pair DataDecrypt with a backend key escrow to create an enterprise-level toolkit for
managing, inspecting, recovering, and re-encrypted data across your enterprise. With
features that search a filesystem for encrypted PSTs, various email format support and
bulk decryption of files, Zeva’s DecryptNaBox software empowers your organization to use
strong encryption without the fear of losing data.
This capability can be extended to existing clients, customized clients, plugins or
stand-alone applications, and client applications that we write for you. Infinite use
cases for extending DecryptNaBox’s decryption capabilities are at your fingertips.
Zeva, Inc. has built strong relationships with other leading technology companies to push the limits of IT, together.
At Zeva, Inc., we believe that collaboration breeds innovation. No single entity can tackle all of the challenges we face alone. When industry experts come together to face those challenges, the resulting solutions are greater than the sum of their parts. To that end, we’ve formed long-term partnerships with the following technology leaders to help engineer the solutions of tomorrow.
Not sure what your needs are...
Let us help!
Our team of experts will schedule a call with you and your team, to help in assessing your needs and customize a solution tailored your encryption and identity challenges.
Request a CallFor the past 17 years, Zeva has been serving customers from the Federal, Commercial and Non-Profit markets around the globe. These are some of our many long-term partnerships and referenceable accounts that trust our solutions.
Discover all the clever ways Zeva Inc.’s free products can help you securely and efficiently automate mundane security tasks. Explore our catalog of free tools below to find a good fit for your organization. Then, contact us to request a free download of each solution you’d like.
Every object in Active Directory has a security identifier (SID). When an object is deleted, however, the SID remains. SIDCleaner removes that remaining SID.
This product syncs group policies, permissions, WMI filters, administrative templates, and organizational units from one environment to another.
AD Permissions exports and imports the access control lists of objects and the OU structure of AD.
Minimize the challenge of changing passwords for service accounts.
BLOG
Could Code Signing Have Prevented the CrowdStrike-Microsoft Outage?If there’s one lesson to be learned from the CrowdStrike outage, it’s this: Code signing must be an integral part...
Dive into the lessons learned as a major U.S. Department pioneered the use of government-wide public key infrastructure for improving confidential email communications
Discover how an intelligence agency partnered with Zeva to decrypt 400,000 emails per day
Empowering efficient, OMB M-19-17-compliant email decryption in support of eDiscovery and FOIA requests
The role a customized, colocation platform played in supporting the joint task force for federal crimes and thwarting tax evasion
