Russian Fplus Creates First Crypto Lock for Secure Server Management

The crypto lock, as explained by Fplus, will protect the server from unauthorized access to its administrative shell, even with vulnerabilities in the built-in management program. It blocks the possibility of direct connection to the BMC (Baseboard Management Controller), which is used for remote server management. There are currently no domestic analogues to this Fplus development, although there are many structures in the Russian Federation that need crypto locks.

This is a unique solution that guarantees that attackers will not be able to gain access to the management of the server infrastructure, remotely deploy malicious programs, or turn expensive equipment into a “brick.” The crypto lock serves as an additional security circuit, which is especially important for customers with increased requirements for the security of their information systems. First of all, this concerns data center and cloud infrastructure operators, companies in the financial sector and state information systems.

Mikhail Volkov, CEO of Fplus

The user can only interact with the controller through an encrypted channel. To connect to it, a special hardware key issued by the corporate certification center is required. This tracks every connection. If someone tries to open or damage the server directly physically, the crypto lock will send a special signal.

In subsequent versions, the crypto lock will be able to create a reference hardware configuration and validate it at startup, checking for possible deviations from the specified parameters. The solution is currently compatible with Fplus servers from the "Sputnik" line. In the future, the company plans to modify the product to use it with other server equipment of its own production.

Earlier in June, Fplus announced that it is launching the first production of color printers in Russia. Fplus will be able to produce more than 100 thousand printers per year, depending on the workload of the lines with other orders.