The thin CoreGuard PEMs are installed on hosts that serve as access points to protected information, where they can identify the context of data access requests, protect the integrity of the host and verify the authenticity of its applications. The Security Server provides a central point of management as well as secure storage for information protection policies and keys.