The Ciphertex CX-Linux Operating System

ENCRYPTION KEY MANAGEMENT:
The Ciphertex CX-Linux Operating System provides three (3) levels of Encryption key management.

1. Ciphertex-Protect^® Encryption Key – FIPS 140-2 Level 3 certified encrypted storage. Encrypted data residing on a Ciphertex SecureNAS^® cannot be accessed unless the Ciphertex-Protect^® key is unlocked and physically inserted into the USB-C port on the front of the server.
2. Key Server – CX-Linux supports centralized storage and management of the encryption key(s) on any key server supporting KMIP.
3. Passphrase – A user or admin supplied passphrase can be up to 256 characters.

DATA AT REST MANAGEMENT:
Data is protected with the Ciphertex CX-Linux implementation of the US Government’s AES-256 Advanced Encryption Standard. It simply cannot be accessed by unauthorized intrusion even if the server is stolen or its disk drives are taken.

CONTROLLED ACCESS TO USB PORTS:
Your CX-Linux admin can opt to disable USB port access, including Ciphertex Quick-Link^® access. As long as USB access is disabled, the SecureNAS^® will ignore all USB devices and eliminate any possibility of accessing (“Thumb Sucking”) the data residing on the server.

DATA TRANSFER ENCRYPTION:
CX-Linux employs SSL certificates in order to enable services, thereby eliminating the possibility of the loss of important data. HTTPS and FIPS support RSA-2048 encrypted communication that protects sensitive data from being transmitted over a network. CX-Linux can generate a unique SSL certificate.

FIREWALL:
The integral, preconfigured CX-Linux firewall allows total lock down of the SecureNAS^® by restricting network access to only authorized SecureNAS^® defined services.

CX-LINUX ZFS IMPLEMENTATION:
The CX-Linux implementation of ZFS provides a simplified way of managing filesystems with background data redundancy management and varying levels of compression.

RAID:
CX-Linux ZFS eliminates the user maintenance tasks that traditional RAID implementations require. It is self-healing and highly resistant to data loss as opposed to standard RAID systems, while providing superior performance.

DATA DEDUPLICATION:
A highly optimized version of block based data deduplication to reduce storage space consumption while limiting the impact of drive read and write speeds.

FTP:
Share filesystems over the network that can be accessed by designated FTP clients.

SMB/CIFS:
Network sharing of filesystems with security options on a per user basis supported by both Windows Active Directory authentication and Linux.

NFS:
Quick and easy setup of NFS share filesystems.

LFTS Phoenix:
Share data in an industry standard LTO tape format for easy sharing of data.

iSCSI TARGET
Reserve sections within your CX-Linux created storage on your SecureNAS^® for network clients to access as a local drive that can be secured with CHAP authentication, thereby allowing the sharing of centrally managed storage.

PORTABLE USB:
CX-Linux allows your SecureNAS^® to share the data on a USB drive over your local network.

BACKUP/RESTORE:
Create backup schedules that can be saved to local drives, LTO tape and industry standard cloud services. These backups are available to restore your SecureNAS^® in the event this becomes necessary for any reason.

CLIENT AND PEER BACKUP/RESTORE:
Centrally manage backup and restore functions of computers on the network with your SecureNAS^®.

SNAPSHOTS:
Create snapshots which can be used to restore your SecureNAS^® to a specific, previous point in time.

UPDATE:
Remotely save system configurations so they can be restored on the same SecureNAS^® or on another SecureNAS^® System updates are done remotely through the server’s web interface, without physical interaction.

Ciphertex CX-Linux+ is Ciphertex CX-Linux Customized to Meet Your Unique Requirement(s)

That’s correct! If there are any operating system features that you need/want which are not currently included in CX-Linux, Ciphertex has got you covered with its industry leading Custom Software Design Service.

Thanks to Ciphertex engineering’s development of our own proprietary software, we have the capacity to provide scalable solutions tailored to your business requirements that ensure the most secure, highest performing systems, ruggedized for superior resilience. The ability able to have your software custom-made for your specific needs is one of the many reasons Ciphertex remains at the forefront in the growing world of data security.