SecurePIM is a solution for government and businesses with a high data security need, who want to provide workers with the same productivity they are used to on mobile and desktop meanwhile being assured that corporate data is safe and under control. Thanks to strict separation of private and business data on the device, SecurePIM is suitable for different enterprise mobility models like “bring your own device” (BYOD) or “corporately owned, personally enabled” (COPE) models. The solution offers different security levels and integrates seamlessly into existing infrastructures. The system solution SecurePIM Government SDS for iOS devices caters to especially high security needs. SecurePIM Government SDS is the only security solution approved by the German Federal Office for Information Security (BSI) to allow the processing and transfer of information classified as “restricted“ (“Ver­schlusssache – nur für den Dienstgebrauch” – VS NfD) on iOS (approval) and Android (pre-approval) devices. In addition, the iOS version has received approval for NATO RESTRICTED.

SecurePIM offers the following functions: email, calendar, contacts, messenger including audio and video calls as well as conferences, document storing, creating and editing, access to fileshare, tasks, notes, encrypted browser for Internet and Intranet and a secure camera.

Depending on your operating system, the SecurePIM version your are using, and your company-specific settings the set of functions available may vary.

The SecurePIM solution is available in many variations, developed for different infrastructures, devices, mobility strategies, and security levels. In this, the SecurePIM App is available for iOS and Android and is compatible with both HCL Domino and Microsoft Exchange. The solution can also be integrated with an MDM solution (Mobile Device Management solution) or is configured and managed through the SecurePIM Management Portal. Thanks to our unique container-only approach, SecurePIM is flexible to adapt to diverse mobility strategies. Scenarios range from corporate owned devices like COPE (Corporately Owned, Personally Enabled) to BYOD (Bring Your Own Device) as well as mixed models, which combine several approaches.

Virtual Solution has developed solutions with specific security features for businesses with high security needs and for the government sector, SecurePIM Enterprise and SecurePIM Government. The system solution SecurePIM Government SDS includes additional security features to fulfill the highest security standards, for example a smartcard integration, enabling two-factor-authentication, as well as an integration into specific networks. Since Germany’s Federal Office for Information Security (BSI) has granted its final approval for iOS and a pre-approval for Android, the solution now allows processing and transferring information that is classified as “For official use only – VS-NfD”. SecurePIM Government SDS is the only security solution approved by the BSI on iOS and Android devices. Since July 2021, the iOS version has also been approved for NATO RESTRICTED. 

SecurePIM uses the Container technology to protect sensitive information and data on mobile devices. It compiles multiple functionalities in just one application. With the intuitive app, complex encryption processes become one-click-operations. Additionally, SecurePIM Government SDS is the only BSI-certified solution to work mobile with classified data (VS-NfD as well as NATO RESTRICTED) on iPhone and iPad in the government sector. For Android, there is a pre-approval for VS-NfD. SecurePIM is compatible with Microsoft Exchange as well as HCL Domino. SecurePIM is the core of every mobile strategy since it adapts to different infrastructures and conditions, while providing highest security.

SecurePIM supports mobile phones and tablets with the operating systems iOS, iPadOS and Android.

The solution certified by the BSI is a system solution with several components. In addition to the app a smartcard is integrated. Highly sensitive operations within the SecurePIM app are relocated to the smartcard from the mobile device and are stored encrypted there. All data is securely synchronized with local network servers via a central access to Information Network Berlin-Bonn (IVBB) or other similar networks. Alternatively, the feature “internal smart card” can be used for iOS. It is integrated into the user’s device and allows them to register and log in to SecurePIM. This eliminates the need for an external smart card and the necessary readers to ensure confidentiality, secure data storage, and transmission. When using the internal smart card, only the mobile device and the device PIN is necessary. The solution also uses an approved MDM system for configuration and administration.
The BSI has granted their approval for the SecurePIM Government SDS system solution for iOS-based mobile devices and has given a pre-approval for Android. It can thus as of now be used for the security level “For official use only – VS-NfD”. The iOS version is also now approved for NATO RESTRICTED. The BSI guarantees that sensitive information and data are indeed protected.

SecurePIM Government SDS uses a smart card for authentication. The TCOS 3.0 Signature Card Version 2.0 is used as the external smartcard. It can be used with the AirID 1, AirID 2 and AirID 2 mini smart card readers. Contactless use via NFC is also supported. Alternatively, the feature “internal smart card” enables secure mobile working without the use of a physical smart card and readers.

TrustDok is primarily aimed at government authorities for whom it is essential that classified information and documents can also be processed securely and efficiently on the move. It is essential that the security of the data is guaranteed, but at the same time a simple and intuitive user interface is available.

TrustDok allows documents from other indigo apps to be opened and saved in the managed iNDIGO environment. Sharing with other indigo apps, such as sending by email, is also possible. In addition, new documents can be created, and existing ones edited. Notes and comments can be added. Change tracking of Office documents is also supported.

VS IAT is designed for technical support, IT administrators and security engineers.

VS IAT offers the possibility to perform setup tests on devices with the help of a series of predefined test runs. In this way, administrators can see, for example, whether the user has the correct network configurations, whether the certificates are correctly installed, valid and trustworthy, or whether the smartcard support is configured correctly.

The following test runs are available:

• Test for access to EST (Enrollment over secure transport) service and SDS Gateway with SDS-Trusted Root-CA list including smartcard support
• Test for access to EST Service and SDS Gateway with own Trusted-Root-CA-List incl. smartcard support
• ActiveSync test (incl. SecurePIM Gateway)
• Exchange Web Services (EWS) test (incl. SecurePIM Gateway)

SecureVPN can either be used together with an MDM or with SecurePIM Government SDS in combination with a smartcard. Each time SecurePIM is used, SecureVPN automatically establishes the VPN connection and disconnects it when it is no longer needed.

For use with MDM, SecureVPN must be provided as an Android Enterprise App in MDM. During installation, the VPN key is obtained via MDM. When using SecurePIM Government SDS, the key must be on the smart card so that SecureVPN can obtain it from there.

SecureVPN contains the Open Source software Strongswan vpn client
Changes carried out by Virtual Solution are subject to the GNU GPL v3 license conditions as published by the Free Software Foundation.

The modified version can be obtained by sending an e-mail to support@securepim.com.

The SecurePIM Management Portal is a Java web application. It runs in an Apache Tomcat with an Apache webserver as frontend. It can be provided as a server component (On-premises) for installation or managed on a server hosted by Materna Virtual Solution GmbH with administrator rights (Cloud).

The SecurePIM Gateway is installed as an application installed in the demilitarised zone on the server of a company or a government authority.