Entrust DataControl

Entrust DataControl is an enterprise virtual machine and cloud storage encryption management solution engineered to protect data at rest across virtualized environments, private clouds, and public multi-cloud platforms. Designed to deliver high-performance, transparent encryption without disrupting underlying applications, it provides organizations with complete control over encryption keys independently of cloud infrastructure providers.

The platform deploys across VMware vSphere, Microsoft Hyper-V, AWS, Microsoft Azure, and Google Cloud Platform, running as lightweight encryption agents on Windows and Linux guest virtual machines managed by the Entrust KeyControl cluster. It integrates natively with VMware vSphere encryption APIs, OpenStack, and enterprise storage systems to provide policy-based encryption and cryptographic disk sanitization. Key operational use cases include encrypting sensitive database virtual machines, ensuring data privacy in multi-tenant cloud hosting environments, cryptographically erasing virtual disks upon VM decommissioning, and complying with stringent data residency regulations.

Featuring zero-downtime rekeying and granular access policies, Entrust DataControl allows organizations to encrypt running virtual machines and storage volumes without taking critical business services offline. Security teams maintain exclusive ownership of encryption keys, ensuring that cloud hosting providers or unauthorized system administrators cannot decrypt sensitive corporate data. The platform simplifies regulatory compliance audits for standards like PCI DSS and HIPAA, prevents unauthorized data exposure, and hardens virtualized enterprise infrastructure.