Government Deployment
The AIC Enterprise Privilege Suite™ is software you install and run. It does not depend on a vendor cloud, so it goes where your mission data already lives. You choose the host, the network, and the key custody.
Deployment models
| Model | What it means | Status |
|---|---|---|
| On premises | Install on your own physical servers or virtual machines | Available now |
| Air-gapped | Run the full product on a network with no internet connection. Signed rotation and elevation packages cross the air gap on approved media | Available now |
| Your own cloud tenancy | Install on Windows or Linux virtual machines in your own subscription or account | Available now |
| Enclave per program | One server per enclave, each with its own key set and administrators | Available now |
| Hardened hosts | Run on Security Technical Implementation Guide (STIG) hardened images | Available now |
Need AIC Enterprise Privilege Suite™ in a government cloud such as Microsoft Azure Government or Government Community Cloud (GCC)? Contact us.
Security foundations
| Area | What AIC Enterprise Privilege Suite™ provides | Status |
|---|---|---|
| Cryptography | AWS-LC, which holds a Federal Information Processing Standards (FIPS) 140-3 certificate, on server cryptographic paths | Available now |
| Key custody | Keys in software, in your PKCS#11 Hardware Security Module (HSM), or in a key you own in a cloud key service | Available now |
| Identity | Local accounts, Active Directory, Microsoft Entra ID, Okta, and OpenID Connect | Available now |
| Audit | Windows Event Log and syslog in RFC 5424, CEF, or LEEF | Available now |
Planning a deployment
- Tell us your boundary. On premises, air-gapped, your own cloud tenancy, or a government cloud.
- Prepare the host. A Sales Engineer sends the host requirements for the model you chose.
- Evaluate on site. Install the 30-day on-premises evaluation inside your network.
- Move to production. Your team or a partner installs the licensed software on the same model.
Contact us
Tell us where AIC Enterprise Privilege Suite™ needs to run, and we will work through it with you.
Review the Architecture Before Deployment
- Identify the hosting environment, network boundaries, and permitted external connections.
- Confirm the key-custody model and the systems administrators must reach.
- Validate the selected architecture with a representative access and audit workflow.