Overview

Data at Rest Security... Simplified

Citadel FIPS-certified self-encrypting drives (SEDs) are the only SSDs to integrate multifactor authentication, pre-boot authentication (PBA), and hardware encryption into a complete, low cost solution.

Pre-Boot Authentication Keeps Intruders Away

Powered by CipherDrive®, our built-in PBA unlocks access to the encrypted operating system or virtual machine on the Citadel K-MD SED as well as the data stored there. This secured data is encrypted by NSA-approved Advanced Encryption Standard (AES) 256-bit encryption at the hardware level. Once booted, Citadel allows no-overhead, hardware-speed access to encrypted data at the full performance of the system. 

Multi-Drive Support

Unlock one SED to authorize access to all SEDs. Perfect for tactical servers and other systems with multiple Citadel K-MD SEDs installed.

A Complete CSfC Layer

All DIGISTOR FIPS SEDs—including Citadel K Series SEDs—are listed on the NSA CSfC Component List for hardware full drive encryption, which allows DoD, Federal agencies, and critical infrastructure to protect mission critical and classified data using commercial solutions. Together with the built-in PBA which is also CSfC listed for hardware full drive encryption, a Citadel K Series SED constitutes a complete CSfC layer.

NIAP Compliant, TAA Compliant, and Common Criteria Certified

All Citadel K-Series SEDs are NIAP-compliant (VID #11297), TAA compliant, and have been listed by NIST as FIPS 140-2 L2 certified storage devices with NIST Certificate #3926, ensuring they meet most stringent cybersecurity standards.

Wide OS and Hypervisor Compatibility

Citadel K-MD SEDs are used in Windows and Linux operating systems as well as with SecureView and Forcepoint.

Compatible with Major Computer Manufacturers

Computer systems that are supported by Citadel K Series Secure SEDs are contained in this hardware compatibility list (HCL).

Other Versions

• Citadel K-SD (Single Drive Version): Secure critical or classified Data at Rest (DAR) with pre-boot authentication
• Citadel K-GL (Headless Version): Secure critical or classified Data at Rest (DAR) on on downrange devices that require headless authentication

Technical Specifications