DPM easyCipher is a centrally managed, policy-based Transparent Data Encryption (TDE) solution that protects files, folders, and databases on servers and laptops using an agent-based architecture. It operates on a lock-box model where protected objects are either encrypted or decrypted transparently for authorized users. Encryption policies are defined centrally and pushed to DPM easyCipher agents installed on target systems. **Scope of Protection:** - All file types, folders, and database contents across servers and laptops - Database environments: all editions and versions of MS SQL Server, Oracle, MySQL, PostgreSQL, MariaDB, and other multi-vendor databases - Database log files, SQL query copies, and other artefacts that may contain echoes of sensitive data - Web/app servers, file servers, and laptops where agents are deployed **Key Capabilities:** - Provides TDE coverage for databases that lack native TDE support - Extends protection beyond native TDE for databases that already have it (covering logs, files, and application servers) - Centralizes encryption key generation and management, removing that responsibility from DBA teams - Adds a layer of protection against compromised DBA or System Admin accounts **Deployment Options:** - Available as a standalone TDE solution - Can be combined with other Randtronics DPM suite components: - DPM easyKey: enterprise key management with multi-vendor HSM support and data-sovereignty compliance - DPM easyData: field-level data protection including column-level encryption, tokenization, masking, and anonymization