🚀 New in NetApp Console: Smarter Licenses, Subscriptions & Billing Preferences
We’re excited to share some big news from the NetApp Console team! 🎉M ...read more
Discover how NetApp’s AI Data Guardrails turn governance into a living system—enabling secure, compliant, and scalable AI platforms. From risk managem ...read more
By Mohammad Hossein Hajkazemi, Bhushan Jain, and Arpan Chowdhry
Introduction
Google Cloud NetApp Volumes is a fully managed, cloud-native storage s ...read more
NetApp Console delivers HIPAA (Health Insurance Portability and Accountability Act)- compliant data intelligence without storing ePHI
NetApp Console n ...read more
🚀 New in NetApp Console: Smarter Licenses, Subscriptions & Billing Preferences
We’re excited to share some big news from the NetApp Console team! 🎉 Managing licenses and subscriptions just got a whole lot easier — and smarter — with the launch of Billing Preferences and enhanced Customer Notifications.
These updates, live since November, are now powered by two new roles — License & Subscription Viewer and License & Subscription Admin — giving you the flexibility and visibility you need to take full advantage of these features.
... View more
StorageGRID has achieved Federal Information Processing Standards (FIPS) certification with both hardware and software methods, and Entropy certification, making it the most security-certified object storage vendor in the market.
These certifications ensure the highest level of security for your data in highly regulated industries like government, finance, and healthcare.
Additionally, they are a testament to StorageGRID's robust security infrastructure, designed to comply with the most stringent security standards and provide exceptional protection against data breaches. This means you can confidently deliver highly secure and compliant solutions to your customers, knowing that your storage infrastructure meets the highest security benchmarks.
What are FIPS and Entropy Certifications?
FIPS Certification: Federal Information Processing Standards (FIPS) are publicly announced standards developed by the United States federal government for use in computer systems by non-military government agencies and contractors. FIPS 140-3, in particular, is a U.S. government standard that specifies the security requirements for cryptographic modules used within security systems to protect sensitive information. Achieving FIPS certification means that cryptographic modules within StorageGRID have been rigorously tested and validated to meet these stringent security standards.
Entropy Certification: Entropy certification ensures that the random number generators used in cryptographic processes are truly random and secure. High-quality entropy is essential for generating cryptographic keys that are resistant to attacks. This certification (SP 800-90B) validates that random number generation processes in StorageGRID meet the highest standards of randomness and security.
FIPS and Entropy certifications are recognized internationally, making StorageGRID a trusted solution for organizations worldwide that require stringent security measures.
What Do These Certifications Mean for You?
Enhanced Data Protection: FIPS and Entropy certifications ensure that cryptographic modules and random number generation processes in StorageGRID provide robust security for sensitive data, protecting it from unauthorized access and breaches.
Regulatory Compliance: Highly regulated industries, such as government, finance, and healthcare, require compliance with FIPS and entropy standards to ensure the security of sensitive information. These certifications help you meet regulatory requirements and maintain compliance.
Why Choose StorageGRID?
At NetApp, security is not just a feature but a fundamental aspect of our products. Our multiple certifications are a reflection of our commitment to providing secure and reliable storage solutions. Here are a few reasons why the security and compliance features in StorageGRID stand out:
FIPS-Certified Cryptographic Modules: Ensures rigorous security standards for data encryption, providing customers with robust protection against data breaches.
Entropy-Certified Random Number Generation: Provides high-quality random numbers for secure cryptographic keys, ensuring customers' data remains confidential and secure.
Data Encryption: Protects data at rest and in transit using advanced encryption techniques, safeguarding customers' sensitive information from unauthorized access.
Access Controls: Implements robust access management to restrict unauthorized data access, giving customers peace of mind that only authorized users can access their data.
Audit Logging: Maintains detailed logs of all access and activities for compliance and forensic analysis, helping customers meet regulatory requirements and investigate security incidents.
Compliance with Industry Standards: Meets requirements for regulations like GDPR, HIPAA, and PCI-DSS, enabling customers to operate within legal frameworks and avoid fines.
Immutable Storage: Protects data from tampering and unauthorized alterations, ensuring customers' data integrity and reliability.
Data Integrity Checks: Continuously verifies data integrity to prevent corruption and loss, providing customers with confidence in the reliability of their stored data.
In fact, NetApp meets the higher standards and requirements of federal security needs more than any other on premise vendor.
Capability
NetApp StorageGRID
MinIO (AIStor / Ent.)
Scality (ARTESCA / RING)
Dell EMC ECS
Pure FlashBlade
Cloudian HyperStore
FIPS 140-validated cryptography
✔️
✔️
❌
✔️
✔️
✔️
FIPS-approved mode / operation
✔️
✔️
❌
✔️
✔️
✔️
NIST SP 800-90B entropy validation
✔️
❌
❌
❌
❌
❌
Encryption at rest
✔️
✔️
✔️
✔️
✔️
✔️
Encryption in transit (TLS)
✔️
✔️
✔️
✔️
✔️
✔️
Fine-grained IAM / S3 policy control
✔️
✔️
✔️
✔️
✔️
✔️
Enterprise IAM integration (LDAP/AD/OIDC)
✔️
✔️
✔️
✔️
✔️
✔️
Comprehensive audit logging
✔️
✔️
✔️
✔️
✔️
✔️
Forensics-grade audit detail
✔️
✔️
✔️
✔️
❌
✔️
Immutability / WORM (S3 Object Lock)
✔️
✔️
✔️
✔️
✔️
✔️
Legal hold support
✔️
✔️
✔️
✔️
❌
✔️
Governance vs compliance modes
✔️
✔️
✔️
✔️
❌
✔️
Customer-managed encryption keys
✔️
✔️
✔️
✔️
✔️
✔️
External KMS / HSM (KMIP, Vault, etc.)
✔️
✔️
✔️
✔️
✔️
✔️
Multi-tenant isolation
✔️
✔️
✔️
✔️
✔️
❌
Designed for regulated retention workloads
✔️
✔️
✔️
✔️
❌
✔️
Even among the features claimed by others, only StorageGRID has all these options in all versions and models of our product, as well as having a strong presence with publicly listed certification validations.
Continuous Commitment to Security
Your data's security is our top priority, and these certifications highlight our dedication to providing you with the most secure and reliable storage solutions available.
Achieving FIPS and Entropy certifications is a significant milestone for StorageGRID, but it is not the end of our journey. Our commitment to security excellence ensures that you are partnering with a provider that prioritizes the safety and compliance of your data, giving you a competitive edge in delivering secure solutions.
FIPS and Entropy certifications StorageGRID reinforce our commitment to data security and regulatory compliance. With these achievements, StorageGRID stands out as the most certified object storage vendor in the market. We are dedicated to providing our customers with secure and reliable storage solutions that meet the highest standards of protection. As we move forward, we will continue to invest in our security measures, maintaining our position as a trusted leader in the storage solutions market.
If you need a highly scalable and secure object storage solution, StorageGRID leads the industry. If you want to learn even more about the secure data features in StorageGRIDb you can read more here Learn more about StorageGRID here or contact your NetApp sales representative.
Reference:
NetApp StorageGRID
FIPS 140-3 validated cryptographic module https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5097
FIPS 140-3 Security Policy (NIST) https://csrc.nist.gov/CSRC/media/projects/cryptographic-module-validation-program/documents/security-policies/140sp5097.pdf
NIST SP 800-90B Entropy Validation (E223) https://csrc.nist.gov/projects/cryptographic-module-validation-program/entropy-validations/certificate/223
IAM & fine-grained S3 policy control (AWS policy language) https://docs.netapp.com/us-en/storagegrid/s3/use-access-policies.html https://docs.netapp.com/us-en/storagegrid-enable/examples/bucket-policy-examples.html
Comprehensive audit logging (forensics-grade) https://docs.netapp.com/us-en/storagegrid/audit/ https://docs.netapp.com/us-en/storagegrid/audit/audit-log-file-format.html
Immutability / Compliance (S3 Object Lock, retention, legal hold) https://docs.netapp.com/us-en/storagegrid/tenant/using-s3-object-lock.html https://docs.netapp.com/us-en/storagegrid/ilm/managing-objects-with-s3-object-lock.html
External key management (KMIP-based KMS integration) https://docs.netapp.com/us-en/storagegrid/admin/kms-configuring.html
... View more
In today's fast-paced digital world, maintaining the continuity of your business operations during unforeseen disruptions is of paramount importance. Enter NetApp Disaster Recovery, a robust SaaS product that simplifies disaster recovery (DR) while reducing costs and complexity.
With traditional DR, the challenges can vary from having to manage VMware and on-premises storage independently, which can be daunting and resource intensive, to licensing requirements that lead to higher costs and inflexibility. In addition, many solutions depend on VMware vSphere APIs for data protection, which consume extra resources and fail to support on-premises native efficiency capabilities in the cloud.
Now let's talk about the fixes that come with NetApp Disaster Recovery
... View more
In this post, I will further explore the benefits of offloading your KV cache to shared storage. I will show the benefits of a shared storage tier and explain why, with certain configurations, there is virtually no downside to including a shared storage tier.
... View more