Gazinformservice: SafeNode System Loader

The SafeNode System Loader (SDZ) is a software and hardware tool built into the UEFI BIOS that protects against unauthorized access to workstations and servers from the moment they are turned on until the operating system starts.

2024

Compatibility with Rosa Chrome 12 OS

On August 12, 2024, Gazinformservice and STC IT ROSA announced the confirmation of the stable operation of SafeNode System Loader with the ROSA Chrome 12 operating system. This combination provides a comfortable and safe working environment for automated systems that require information protection by means certified by FSTEC.

According to the results testings , the specialists of both companies confirmed the stable operation of the installer of the SafeNode System Loader trusted download tool and the SafeNode System Loader trusted download tool developed by Gazinformservice with the ROSA Chrome 12 operating system (developed by STC IT ROSA JSC). This ensures a safe and stable launch of the operating system. The solution is suitable for organizations working in the field, health care formations state management and other industries where security and reliability are critical.

SafeNode System Loader is a proven trusted boot tool that protects against malware and unauthorized access in the early stages of system boot. SafeNode System Loader complies with the requirements of FSTEC guidelines Russia for trusted download tools of the level of the basic class 2 I/O system.

ROSA Chrome is an operating system for computers and servers that is quickly and easily deployed. It is based on the own ROSA 2021.1 repository, which uses the latest versions of the kernel, and all components are checked for compatibility with each other.

"Now Gazinformservice has an installer for the ROSA Chrome 12 operating system in its arsenal, which simplifies its centralized installation and significantly increases the speed of deployment," said Konstantin Hitrovo, SDZ product manager SafeNode System Loader.

TeamRAY Server Compatibility 2122-2U-M ICL

ICL System Technologies and Gazinformservice have achieved compatibility of ICL server equipment with SDZ SafeNode System Loader. Gazinformservice announced this on March 18, 2024.

The reliable operation of the SafeNode System Loader trusted download tool (SDZ) with the teamRAY server 2122-2U-M manufactured by ICL HA has been confirmed.

The correct functioning of the server with the built-in SDZ SafeNode System Loader increases its security and allows you to use a joint solution as part of the network infrastructure and information systems that process sensitive information - biometrics, etc.

Gazinformservice "in recent years has significantly strengthened its work through technological partnerships, since for our customers the correct operation of products is one of the primary options. Partnership with ICL Group of Companies is an important part of such work and an excellent prospect for providing our products on the market, "says Roman Pustarnakov, Deputy General Director, Head of the Customer Management Department of Gazinformservice.

For the second time in 2024, we are testing for product compatibility with colleagues from ICL System Technologies, I will note the high speed of work and coordinated interaction. The line of ICL equipment with confirmed compatibility with our trusted download tool is rapidly expanding, which certainly increases customer interest in our collaborative solutions, "commented Konstantin Hitrovo, SDZ Product Manager SafeNode System Loader.

We strive to constantly improve our products, carry out work to ensure their compatibility with software solutions in demand on the market. The achieved results of work with Gazinformservice LLC can contribute to the wider distribution of ICL equipment for the operation of state information systems, backbone companies and other companies, - said Ildar Vagizov, Commercial Director of ICL Techno.

ICL Device Compatibility

ICL System Technologies LLC and Gazinformservice LLC successfully completed a series of tests for the correctness of joint operation of products, as a result of which a certificate of conformity was issued. This was reported to ICL System Technologies on February 5, 2024.

Testing was carried out within the framework of a technological partnership and confirmed the reliable operation of the SafeNode System Loader1 trusted download tool (SDZ) based on the equipment of ICL Techno LLC of the following models: Monoblocks - SafeRay2 S2410 G3R; SafeRay S2710 G3R; SafeRay S2411 G3R; SafeRay S2412 G3R; Workstations - BasicRay3 B101 G3R; BasicRay B102 G3R; BasicRay B103 G3R; BasicRay B104 G3R.

The joint operation of the SafeNode System Loader SDZ and ICL user devices means that a comprehensive solution that includes products from both companies provides a high level of security against possible threats in organizations where protection against unauthorized access to equipment and PO4 from the moment of startup until the start of the operating system is important.

{{quote "Implementation of built-in information security software solutions helps to optimize equipment operation due to controlled number of connected users and external modules. Thus, product sharing will reduce ARM5 maintenance costs and increase the level of security of complex solutions, "said Irek Azizov, General Director of ICL System Technologies LLC. }}

We are pleased that the tests have confirmed the compatibility of our equipment and hope that further cooperation in the use of SafeNode System Loader products and user devices will help us increase the level of security and ensure the security of information in accordance with the requirements of the Regulators, - said Ildar Vagizov, Commercial Director of ICL Techno LLC.

The work done to test the joint functioning of the SafeNode System Loader SDZ and ICL user devices is very significant for both us and our customers. We are glad to strengthen our technological partnership with ICL Group of Companies and see a great prospect for a wide presentation of joint products on the market, - said Roman Pustarnakov, Deputy General Director - Head of the Customer Management Department of Gazinformservice.

Confirmation of the correct operation of SafeNode System Loader with the product line of our partners ICL System Technologies LLC and ICL Techno LLC, another step to guarantee the safe use of compatible solutions for our customers, - commented on the test results Konstantin Hitrovo, SDZ Product Manager SafeNode System Loader.

2023

Aquarius Product Compatibility

LLC Gazinformservice"" and the Group of Companies Aquarius"" successfully completed a series of tests for the correctness of joint operation of proprietary products - SafeNode System Loader and client equipment:, Aquarius Mnb Pro monoblock T904 laptop Aquarius Cmp NS685U Version 4, -Aquarius laptop Cmp NS483 Version 2. This was announced Gazinformservice by "" on December 12, 2023.

Technological compatibility is confirmed by the specialists of the development departments of both companies, provided that the requirements of the operational documentation are met. Compatibility testing was performed with both the certified version of SafeNode System Loader (SNSL) 1.6 and the pre-release of the latest version of SNSL 1.7.

Deploying firmware-level information protection in Aquarius hardware increases the security of a joint solution. And using built-in information security software solutions not only reduces the risk of hardware failure by optimizing the number of plug-ins, but also reduces hardware maintenance costs.

As part of 2023, there were a large number of compatibility of our products and releases with partner developments and specifically with Aquarius products - a very fruitful year. We plan that in 2024 all the equipment of the Aquarius Group of Companies in our market will have confirmation of compatibility with our product. Of course, in 2024 we are waiting for the development of cooperation in other areas, - commented on the test results of the SDZ SafeNode System Loader product manager Konstantin Hitrovo.

Successful work continues to integrate software security mechanisms from our partners - Gazinformservice - into Aquarius devices. Close cooperation of our specialists allows us to create trusted domestic solutions that meet the requirements for ensuring the necessary levels of security for personal data information systems, state information systems and critical information infrastructure (CII) facilities, "said Konstantin Zakatov, director of the information security department of the Aquarius group of companies.

Aquarius Server Compatibility T50 D110CF

LLC Gazinformservice"" and LLC "PC" Aquarius have completed a series of tests for the correctness of the joint functioning of their own products - the SafeNode System Loader and trusted download tools. servers Aquarius T50 D110CF Gazinformservice announced this on August 28, 2023.

Technological compatibility is confirmed by the specialists of the development departments of both companies, provided that the requirements of the operational documentation are met.

Testing was carried out for several weeks at the Aquarius and Gazinformservice sites with a complete cycle of checking the correct functioning of the entire spectrum used in a joint software solution. And the presence of engineers of both companies necessary for testing skills and extensive development experience made it possible to ensure correct embedding and stable collaboration of a comprehensive solution in the shortest possible time.

Embedding firmware-level information protection in the high-performance Aquarius T50 D110CF server increases the security of a joint solution. And using built-in information security software solutions not only reduces the risk of hardware failure by optimizing the number of plug-ins, but also reduces hardware maintenance costs.

The compatibility of our solutions is another step within the framework of the technological partnership of companies. Of course, we plan to continue to work on the integration of our products and make the world safer, - commented on the results of the SDZ SafeNode System Loader product manager Konstantin Hitrovo.

Successful work continues to integrate the means of protecting the information of our partners - Gazinformservice - into Aquarius devices. Close cooperation of our specialists allows us to create trusted domestic solutions that meet the requirements for ensuring the necessary levels of security of personal data information systems, state information systems and critical information infrastructure (CII) facilities, "said Andrey Reshetov, director of information security at Aquarius.

Compatibility with Rutoken products

Gazinformservice and Active completed a series of tests on the correctness of the joint functioning of their own products - SDZ SafeNode System Loader and Rutoken devices. Gazinformservice announced this on August 9, 2023.

As a result testings , the correctness of the joint functioning of the SafeNode System Loader SDZ with the following key media and tools cryptographic information protection was confirmed: the flagship line USB of tokens smart cards Rutoken EDS and 3.0, including the Rutoken EDS 3.0 family of devices, and NFC Rutoken Lite.

Manufacturers guarantee the stable operation of the software and their technical compatibility. In support of this, a certificate was signed informing that all product functions are fully available to users.

Rutoken is one of the most famous tokens on the Russian market and confirmation of compatibility with current models of this brand is very significant for our product, "commented Konstantin Hitrovo, SDZ SafeNode System Loader product manager.

Over the years, Aktiv has worked with technology partners to develop comprehensive data protection solutions. Our devices are guaranteed to work with commercial and government information systems, providing reliable login protection for workstation and server users. Cooperation with such a significant player in the Russian information security market as Gazinformservice is very important for us. Our joint solution of SDZ SafeNode System Loader and Rutoken devices will help create a trusted environment and avoid misuse of confidential information, "said Ksenia Shavrova, Manager of Integration and Products at Rutoken Asset Company.

2022: Compatible with Aquarius Pro P30 PC K44

The joint solution of Aquarius and Gazinformservice for trusted loading received a compatibility certificate. The Aquarius company announced this on December 12, 2022.

The joint solution between the two companies is the SafeNode System Loader Basic I/O Layer Trusted Boot Tool, designed to provide a trusted load of//families operating systems (including WindowsUnixLinux systems/) virtualizations ESXESXi on electronic computers (computers) Aquarius with x86 architecture. K44 ПК Aquarius Pro P30 , a modern powerful personal, computer demanded by employees of various organizations for daily use, was tested for compatibility.

The correct operation of the built-in SafeNode System Loader boot module on the Aquarius Pro P30 PC K44 confirmed by joint tests successfully conducted by engineers from Aquarius and Gazinformservice. Based on the test results, a certificate of compatibility was obtained.

The solution allows you to protect information from unauthorized access on the device from the moment it is turned on until the operating system starts due to the motherboard with a software security module located inside the device. These protection measures are declared for information systems that process information that does not constitute a state secret in significant objects of the critical information infrastructure of the 1st category, in state information systems of the 1st security class, in automated systems for controlling production and technological processes of the 1st security class, in personal data information systems, if it is necessary to ensure the 1st level of personal data security.

"Over the years, our company, together with technology partners, has been developing and creating reliable comprehensive solutions for trusted download and protection of personal and corporate data. The alliance of Aquarius and Gazinformservice companies plays an important role in the development of approaches that ensure the fulfillment of the requirements for CII facilities. Such projects allow us to offer customers solutions to ensure the protection of information from unauthorized access before the start of the operating system, "said Andrey Reshetov, Director of Information Security at Aquarius.

Information security developments are optimal not only for ensuring the necessary level of information security, but also for optimizing the actions of the end user who receives a ready-made solution without the need to ensure compatibility of its components. It meets the requirements of FSTEC and provides the necessary level of security in the target information system.

Director of the Customer Management Department Roman Pustarnakov of Gazinformservice stressed: "For our companies, this is the first joint project to replace trusted load boards with software protection tools in current conditions, when it is not possible to ensure stable supply of boards using foreign-made electronic components."

2021

JaCarta Product Compatibility

Gazinformservice, a domestic developer of software and equipment for the protection of information security and integrated engineering and technical security, announced on February 3, 2021 that, together with Aladdin R.D., a Russian developer and supplier of authentication tools and solutions for ensuring information security and protecting confidential data, conducted a series of tests for compatibility of their products.

Based on the results obtained, a compatibility certificate was issued confirming the correct operation of the electronic keys of the JaCarta line from Aladdin R.D. with the SafeNode System Loader trusted download tool from Gazinformservice.

Compatibility and correctness of simultaneous use is proven for smart cards USB JaCarta PKI, JaCarta GOST, JaCarta PKI/GOST, GOST JaCarta-2 and JaCarta SF/GOST USB tokens. Testing was carried out in such operating systems Windows 78 as/.1/10/2008 Server R2/2012 Server/2012 Server R2/2016 Server/2019 Server and OS/, LinuxUnix which support Linux Standard Base (LSB) version 3.0 or higher using additional software "" JaCarta Single Client version 2.12 or higher.

Features and Harasteristics

Tasks to be solved for February 2021:

• Protection against unauthorized access during the device boot phase.
• Ensure that abnormal operating systems are blocked from loading.
• Compliance with the requirements of the orders of the FSTEC of Russia:
  • No. 17 on the protection of state information systems (GIS);
  • No. 21 on the protection of personal data information systems (ISDS);
  • No. 31 for the protection of automated process control systems (APCS);
  • No. 239 for the protection of significant objects of critical information infrastructure (CII).

• Providing trusted loading in automated systems that process state secrets.

Product Features:

• The ability to install in UEFI BIOS of various manufacturers.
• Software installation without opening the PC case.
• Centralized installation, administration templates, and audit collection.
• Monitoring the invariability of UEFI by checking the integrity of the composition of its modules, as well as the integrity of UEFI system tables.
• Two-factor authentication before booting the operating system.
• Monitoring of RAM operability.

"SafeNode System Loader" complies with the requirements of the FSTEC of Russia guidelines for the trusted download tools of the level of the basic I/O system of class 2 and can be used to build:

• automated systems that process information constituting a state secret up to and including the 2A security class;
• automated systems that do not process information constituting a state secret up to and including 1G security class;
• state information systems up to and including K1 security class;
• personal data information systems up to and including level 1 of security;
• automated systems with technological processes up to and including protection class 1;
• Significant critical information infrastructure objects up to and including category 1^[1].

Notes