Siemens’ Teamcenter AIP DRM to protect sensitive data beyond organizational boundaries

SECUDE’s HALOCORE® and HALOCAD® data security solutions seamlessly integrates Azure Information Protection with SAP
Share in:


SECUDE, a Siemens foundation partner, is a leading Digital Rights Management (DRM) solution provider leveraging Microsoft Azure Information Protection (AIP). Secude offers data protection and usage controls in an enterprise environment such as PLM, ERP, Block Chain applications and associated integrations.

Siemens customers can realize immense value from the Siemens Teamcenter® AIP DRM solution as follows:

  1. Holistic data encryption strategy for CIOs and CISOs based on Microsoft DRM platform, the most visible and extensible platform in the market today
  2. Lower TCO as Azure Information Protection (AIP) is a part of the Microsoft Office 365
  3. AIP based data encryption guarantees the sovereignty and the responsible use of organizations’ data by insiders, partners, suppliers and customers
  4. Enable you to extend the established Teamcenter security policies beyond your organization boundaries Support to encrypt CAD data such as from NX™ software, Solid Edge® software, AutoCAD, Inventor, Creo as well as non-CAD data such as MS office, PDF and other data formats
  5. Support to encrypt CAD data such as from NX™ software, Solid Edge® software, AutoCAD, Inventor, Creo as well as non-CAD data such as MS office, PDF and other data formats
  6. Promote zero tolerance across the extended enterprise

Today, organizations are looking for overcoming below business security challenges to achieve the Zero Trust security policy while working with customers, partners and suppliers.

Business security challenges:

  1. How to achieve end to end data security with confidentiality, integrity and protection?
  2. How to empower suppliers, partners and joint ventures with controlled governance?
  3. How to protect data in the age of cloud adoption and BYOD?
  4. How to achieve stringent regulatory compliances?
  5. How to unfold and address the potential data security threats?

Teamcenter AIP DRM solution addresses the above business challenges through:

  1. Controlled data access: Ability to control view, modify, print, copy and export
  2. Author and co-author roles: Designate supplier lead to manage file access
  3. Data access expiration: Enforce data expiration based on time period or date
  4. Secure offline access: Enable data access in offline mode securely
  5. Leverage MIP and Azure RMS: Enable cloud-based authentication and protect data on almost any device
  6. Regulatory compliance dashboard in Azure Security Center: Currently supported standards are Azure CIS, PCI DSS 3.2, ISO 27001 and SOC TSP
  7. Complete traceability: Ability to create audit logs and trails for user actions on data
  8. Simplified administration: Data access with predefined group & roles

Siemens Teamcenter AIP DRM enables data protection through encryption thereby controlling the access and usage on the data throughout its lifecycle.

Data protection and its usage are supported in a Teamcenter ecosystem:

  1. Active Workspace – NX, Solid Edge, CREO, AutoCAD & MSO Integrations
  2. Rich Application Client – NX, Solid Edge, CREO, AutoCAD & MSO Integrations

Similarly, in a standalone environment our support includes:

  1. NX, Solid Edge, CREO, AutoCAD and MSO

Note: Support for more features like embedded visualization, watermarking, supplier collaboration framework and translators are underway for future product releases.

Teamcenter AIP DRM solution key features includes:

  1. Data encryption support for CAD and Non-CAD data
  2. Automatic classification (label) of data and encryption based on data as well as user information in Teamcenter
  3. Seamlessly and transparent usage of protected data for user
  4. HALOCAD Reader to view and analyze data for the user without explicit Azure environment
  5. BYOK – Configure tenant with customer defined key instead of default key generated by Microsoft
  6. Disable screen captures using print screen, snipping tool, remote sharing etc.
  7. Export Bill of Materials from Teamcenter in PLM XML encrypted format. The encrypted XML file can be viewed along with label using Azure Protection viewer
  8. Automatic label enforcement for assembly components
  9. Ability to have differential rights for individual user or user groups for the same file
  10. Protected data access and usage controls in standalone applications such as NX, Solid Edge and other CAD applications

Note: A list of relevant Siemens trademarks can be found here.


SECUDE is an established global security solutions provider offering innovative IT data protection for SAP users.

Founded as a joint venture between SAP and Fraunhofer Institute in 1996, SECUDE maintained a close SAP technology partnership and became a reliable resource for security solutions for the SAP market with ‘Single Sign-On’ for SAP, which was acquired by SAP in 2011. With a focus on making business process for data protection efficient and automated with little or no user interference, SECUDE’s goal is to provide ease of use while minimizing cost of rollout and operations.

Leveraging its 20-plus years of experience in SAP security and business process know-how in protecting enterprise IP and data, SECUDE proffers HALOCORE® as a holistic approach to protect SAP data exports. In addition, it offers CAD file-specific security solution through HALOCAD® for SAP and non-SAP environments.

SECUDE’s solutions are trusted by many Fortune 500 and DAX listed companies. With branches in Europe, North America and Asia, SECUDE supports customers with the implementation of IT security strategies through a global network.

There are many products that promise to secure CAD, CAM, CAE, and MSO files shared in worldwide process chains using proprietary encryption. However, when you have invested in Microsoft Office 365, it makes sense to leverage Microsoft AIP using a simple, cost-effective Teamcenter AIP DRM. This can greatly enable Siemens’ application users to seamlessly leverage their investment in data security.

Holger Huegel, VP – Technology