Inline Media Encryptor
The Inline Media Encryptor (IME) is a government-developed media encryption device. It is positioned "in line" between the computer processor and hard drive to ensure that anything stored to the hard drive gets encrypted and anything retrieved from the hard drive gets decrypted. The IME protects data classified Top Secret and below. Data stored on the hard drive is considered unclassified when encrypted. The IME was certified 26 November 2006.
How the IME Works
The IME provides Type 1 Encryption on a computer's Integrated Device Electronic (IDE) hard drive. It encrypts all physical sectors, including the Operating System (OS). With the IME physically positioned between the computer system and its hard drive, all data must pass through the IME and is stored encrypted on an IDE hard drive. Only those files "called" from the hard drive get decrypted. The hard drive always remains encrypted.
The IME meets emergency zeroization requirements for the rapid zeroization of data - without destroying the computer or rendering the data completely unrecoverable. Once the emergency zeroization mechanism is initiated, an adversary will have no way to obtain the information stored on the hard drive without the Crypto-Ignition Key (CIK). However, methods are in place to restore data if zeroized.
There are two types of IMEs, the KG200 and KG201.
IME Features and Benefits
For Mobile Users
IME Key Management
IME Purchasing Options
Customers can purchase the IME through NSA's IDIQ contract. Contract number is H98230-08-D-0096. Customers may also purchase devices directly from ViaSat, Inc.
To learn more about the IME and purchasing, contact:
Date Posted: Jan 15, 2009 | Last Modified: Jun 8, 2012 | Last Reviewed: Jun 8, 2012