ADmitMac PKI Executive Summary. 2010, Thursby Software Systems, Inc.

Size: px
Start display at page:

Download "ADmitMac PKI Executive Summary. 2010, Thursby Software Systems, Inc."

Transcription

1 ADmitMac PKI Executive Summary Thursby Software Systems, Inc. November 15,2010

2 Why ADmitMac PKI? Leverage your existing Active Directory and PKI infrastructure when adding Macintosh computers. Helps meet U.S. government requirements. Reduces cost of supporting Macintosh computers.

3 Status ADmitMac for CAC v1.0 released October, 2006 ADmitMac for CAC v2.0 released March, 2008 ADmitMac for CAC v2.0.7 used in Army Golden Master (Mac OS 10.5) released September 2009 ADmitMac PKI v3.1 released August, 2010 supports both Mac OS 10.5 Leopard and 10.6 Snow Leopard, and CAC and PIV cards

4 Ten Ways ADmitMac PKI Adds Value Thursby Software Systems, Inc.

5 Meets DoD PKI Requirements The DISA Joint Interoperability Test Command #1 (JITC) has tested ADmitMac for CAC v1.1 and shown that it meets applicable DoD requirements for Public Key Enabled (PKE) software. Certification letter was issued in July ADmitMac PKI passes all JITC tests but has not been submitted for certification yet.

6 Support Customers have direct access to knowledgeable #2 support personnel. Thursby provides expert support for Windows and Macintosh integration. Direct smart card support for all U.S. Government smart cards. All engineering and support is U.S. based.

7 Smart Card Support #3 ensure proper operation of future ADmitMac PKI contains native software required to operate all U.S. Government smart cards, including the newer 144k and Oberthur CAC. ADmitMac PKI smart card software follows NIST, DMDC and ISO 7816 standards to conforming smart cards.

8 Windows Integration ADmitMac PKI signs and encrypts all Active Directory #4 communications. Authentication using SPNEGO, NTLMv1, NTLMv2 and Kerberos. Implements SMB signing. Provides Distributed File System support. Works with Microsoft HISEC templates. Single file format. No._ files.

9 Group Policy Direct integration with Microsoft Group Policy #5 to better integrate into Windows domains. Provides templates for managing Macintosh user experience. Obtains certificate trusts automatically for simpler and more secure deployment.

10 Single Sign-On Provides cryptographic proof to Active Directory that the user logging in possesses #6 their smart card and PIN using PKINIT. Secure log on when away from network. Maintains Kerberos single sign-on obtained using PKINIT, refreshing them when waking from sleep or screen unlocking. Seamlessly integrated with network file and print sharing, and with intranet web services.

11 OCSP ADmitMac #7 PKI can be configured to use the Online Certificate Status Protocol to validate certificates using a designated OCSP responder. Greatly reduces network delays and traffic. Allows use of Tumbleweed.

12 Certificate Trust Trust points for user authentication are #9 synchronized with Active Directory. Active Directory group policy based PKI trusts are synchronized with the Apple Keychain providing direct support to Apple PKI enabled applications such as and web browsing.

13 OS Administration ADmitMac PKI adds a command line tool providing sudo functions without using a #9 password. inserted and unlocked. Army and Air Force ASCL cards also An administrator can perform command line administration authorized using their smart card. Tool requires user to have their smart card supported.

14 Publishes Certificates #10 Publishes user smart card certificates to Active Directory when a user logs in. Allows all Exchange users to send encrypted to Macintosh users without obtaining their certificate first.

15 Summary 1. Meets DoD PKI requirements 2. Supportable and Deployable 3. Direct smart card middleware support 4. Full Windows Integration 5. Group Policy 6. True PKE Single Sign-On (Kerberos PKINIT) 7. Online Certificate Status Protocol (OCSP) 8. Automatic PKI trust configuration 9. sudo Replacement for Administration 10. Publishes CAC Certificates in Active Directory

16 More Information Full featured, free evaluation kit available on our web site. Evaluation kit includes documentation.

DBsign for HTML Applications Version 4.0 Release Notes

DBsign for HTML Applications Version 4.0 Release Notes DBsign for HTML Applications Version 4.0 Release Notes Copyright 2010 Version 4.0 Copyright Notice: The Release Notes has a copyright of 2000-2010 by Gradkell Computers, Inc. This work contains proprietary

More information

Interagency Advisory Board Meeting Agenda, February 2, 2009

Interagency Advisory Board Meeting Agenda, February 2, 2009 Interagency Advisory Board Meeting Agenda, February 2, 2009 1. Opening Remarks (Tim Baldridge, NASA) 2. Mini Tutorial on NIST SP 800-116 AND PIV use in Physical Access Control Systems (Bill MacGregor,

More information

Leveraging HSPD-12 to Meet E-authentication E

Leveraging HSPD-12 to Meet E-authentication E Leveraging HSPD-12 to Meet E-authentication E Policy and an update on PIV Interoperability for Non-Federal Issuers December 2, 2008 Chris Louden IAB 1 Leveraging HSPD-12 to Meet E-Authentication E Policy

More information

Federated Access. Identity & Privacy Protection

Federated Access. Identity & Privacy Protection Federated Access Identity & Privacy Protection Presented at: Information Systems Security Association-Northern Virginia (ISSA-NOVA) Chapter Meeting Presented by: Daniel E. Turissini Board Member, Federation

More information

DHS ID & CREDENTIALING INITIATIVE IPT MEETING

DHS ID & CREDENTIALING INITIATIVE IPT MEETING DHS ID & CREDENTIALING INITIATIVE IPT MEETING October 14, 2004 Part 02 of 02 IMS/CMS Functional Specification General Issuance Requirements Issue a GSC-IS 2.1 compliant dual chip hybrid ICC/DESFire v0.5

More information

Interagency Advisory Board HSPD-12 Insights: Past, Present and Future. Carol Bales Office of Management and Budget December 2, 2008

Interagency Advisory Board HSPD-12 Insights: Past, Present and Future. Carol Bales Office of Management and Budget December 2, 2008 Interagency Advisory Board HSPD-12 Insights: Past, Present and Future Carol Bales Office of Management and Budget December 2, 2008 Importance of Identity, Credential and Access Management within the Federal

More information

Back to My Mac User Guide

Back to My Mac User Guide Back to My Mac User Guide This guide shows you how to use MobileMe over the Internet to access a remote Mac with Mac OS X Snow Leopard installed, a Time Capsule, or an external hard disk connected to an

More information

Implementing Security in Windows 2003 Network (70-299)

Implementing Security in Windows 2003 Network (70-299) Implementing Security in Windows 2003 Network (70-299) Level 1 Authorization & Authentication 2h 20m 20s 1.1 Group Strategy 1.2 Group Scopes 1.3 Built-in Groups 1.4 System or Special Groups 1.5 Administrating

More information

Enabling Smart Card Logon for Mac OS X Using Centrify Suite

Enabling Smart Card Logon for Mac OS X Using Centrify Suite DoD Public Key Enablement (PKE) Reference Guide Enabling Smart Card Logon for Mac OS X Using Centrify Suite 2012.4 Contact: dodpke@mail.mil URL: http://iase.disa.mil/pki-pke/ URL: http://iase.disa.smil.mil/pki-pke/

More information

Application Virtualization Hosting Environment

Application Virtualization Hosting Environment Infrastructure and Operations Division Engineering, Design and Deployment Branch Application Virtualization Hosting Environment June 15, 2016 Version: 16 Unclassified/For Official Use Only (FOUO) Document

More information

Apple Product Security

Apple Product Security Apple Product Security Meeting IT Security Needs Fed/Ed XIV Washington,DC - December 14, 2006 Shawn Geddis Enterprise Security Consulting Engineer geddis@apple.com December 2006 Certificates and Keys Everywhere

More information

Centrify Infrastructure Services

Centrify Infrastructure Services Centrify Infrastructure Services Smart Card Configuration Guide August 2018 (release 18.8) Centrify Corporation Legal Notice This document and the software described in this document are furnished under

More information

Axway Validation Authority Suite

Axway Validation Authority Suite Axway Validation Authority Suite PKI safeguards for secure applications Around the world, banks, healthcare organizations, governments, and defense agencies rely on public key infrastructures (PKIs) to

More information

SafeNet Authentication Client (Mac) ReadMe 1

SafeNet Authentication Client (Mac) ReadMe 1 SafeNet Authentication Client (Mac) ReadMe 1 SafeNet Authentication Client (Mac) ReadMe Version 8.0 Revision A Release Date: March 2010 ====================================================== This document

More information

Operated by Los Alamos National Security, LLC for the U.S. Department of Energy's NNSA

Operated by Los Alamos National Security, LLC for the U.S. Department of Energy's NNSA Operated by Los Alamos National Security, LLC for the U.S. Department of Energy's NNSA LANL s Multi-Factor Authentication (MFA) Initiatives NLIT Summit 2018 Glen Lee Network and Infrastructure Engineering

More information

PROXY Pro Version 10 What s New

PROXY Pro Version 10 What s New PROXY Pro Version 10 What s New Release 10.0.0 (Hotfix #2) July 2018 Proxy Networks, Inc. 320 Congress Street Boston, MA 02210 617-453-2700 http://www.proxynetworks.com Copyright 2006-2018 Proxy Networks,

More information

SOF U OUTLOOK WEB ACCESS (OWA) AND SSL VPN HOME USERS MANUAL

SOF U OUTLOOK WEB ACCESS (OWA) AND SSL VPN HOME USERS MANUAL United States Army Special Operations Command (USASOC) Special Operations Forces Information Technology Enterprise Contracts II (SITECII) SOF U OUTLOOK WEB ACCESS (OWA) AND SSL VPN HOME USERS MANUAL Prepared

More information

DMDC Card Technologies & Identification Systems Division. Evaluation of NIST SP End State Reference Implementation. Version 1.

DMDC Card Technologies & Identification Systems Division. Evaluation of NIST SP End State Reference Implementation. Version 1. DMDC Card Technologies & Identification Systems Division Evaluation of NIST SP 800-73 End State Reference Implementation Version 1.1 October 2005 i Revision History Page Issue Date Document Modification

More information

Using Workspace ONE PIV-D Manager. VMware Workspace ONE UEM 1811 VMware Workspace ONE PIV-D Manager

Using Workspace ONE PIV-D Manager. VMware Workspace ONE UEM 1811 VMware Workspace ONE PIV-D Manager Using Workspace ONE PIV-D Manager VMware Workspace ONE UEM 1811 VMware Workspace ONE PIV-D Manager You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/

More information

Services Directorate Dual Persona User Guide for DoD Enterprise Portal Service Military Sealift Command Version September 8, 2016

Services Directorate Dual Persona User Guide for DoD Enterprise Portal Service Military Sealift Command Version September 8, 2016 Services Directorate Dual Persona User Guide for DoD Enterprise Portal Service Military Sealift Command Version Document Approval Document Approved By Date Approved Name: Brian Purdy??/??/2016 ii Revision

More information

VMware PIV-D Manager Deployment Guide

VMware PIV-D Manager Deployment Guide VMware PIV-D Manager Deployment Guide AirWatch v9.2 Have documentation feedback? Submit a Documentation Feedback support ticket using the Support Wizard on support.air-watch.com. This product is protected

More information

Secure Lightweight Activation and Lifecycle Management

Secure Lightweight Activation and Lifecycle Management Secure Lightweight Activation and Lifecycle Management Nick Stoner Senior Program Manager 05/07/2009 Agenda Problem Statement Secure Lightweight Activation and Lifecycle Management Conceptual Solution

More information

Next Generation Physical Access Control Systems A Smart Card Alliance Educational Institute Workshop

Next Generation Physical Access Control Systems A Smart Card Alliance Educational Institute Workshop Next Generation Physical Access Control Systems A Smart Card Alliance Educational Institute Workshop PACS Integration into the Identity Infrastructure Salvatore D Agostino CEO, IDmachines LLC 8 th Annual

More information

Product Documentation

Product Documentation (/en-us.html) Product Documentation Browse Browse StoreFront 3.1 Technology Preview Search Download full document PDF DOCX PRINT EMAIL System requirements Nov. 12, 2015 When planning your installation,

More information

Welcome to Centrify DirectControl Agent for Mac, Centrify Endpoint Services

Welcome to Centrify DirectControl Agent for Mac, Centrify Endpoint Services Welcome to Centrify DirectControl Agent for Mac, Centrify Endpoint Services Release Notes for Centrify DirectControl Agent for Mac, Centrify Endpoint Services macos Suite 2018 Edition Centrify DirectControl

More information

DoD Wireless Smartphone Security Requirements Matrix Version January 2011

DoD Wireless Smartphone Security Requirements Matrix Version January 2011 DoD Wireless Smartphone Security s Matrix Version 3.5 21 January 2011 1 This matrix was developed by Defense Information Systems Agency Field Security Operations (DISA FSO) and is an unofficial compilation

More information

AWARD TOP PERFORMER. Minex III FpVTE PFT II FRVT PRODUCT SHEET. Match on Card. Secure fingerprint verification directly on the card

AWARD TOP PERFORMER. Minex III FpVTE PFT II FRVT PRODUCT SHEET. Match on Card. Secure fingerprint verification directly on the card AWARD Speed Accuracy Interoperability TOP PERFORMER PRODUCT SHEET Minex III FpVTE PFT II FRVT Match on Card Secure fingerprint verification directly on the card WWW.INNOVATRICS.COM MATCH ON CARD Our solution

More information

WHITEPAPER. Vulnerability Analysis of Certificate Validation Systems

WHITEPAPER. Vulnerability Analysis of Certificate Validation Systems WHITEPAPER Vulnerability Analysis of Certificate Validation Systems The US Department of Defense (DoD) has deployed one of the largest Public Key Infrastructure (PKI) in the world. It serves the Public

More information

Strategies for the Implementation of PIV I Secure Identity Credentials

Strategies for the Implementation of PIV I Secure Identity Credentials Strategies for the Implementation of PIV I Secure Identity Credentials A Smart Card Alliance Educational Institute Workshop PIV Technology and Policy Requirements Steve Rogers President & CEO 9 th Annual

More information

Technical Bulletin: CAC Data Model Change in 144K Dual Interface Cards

Technical Bulletin: CAC Data Model Change in 144K Dual Interface Cards DEPARTMENT OF DEFENSE HUMAN RESOURCES ACTIVITY DEFENSE MANPOWER DATA CENTER DoD CENTER MONTEREY BAY 400 GIGLING ROAD SEASIDE, CALIFORNIA 93955-6771 To: DoD CAC Application and Testing Community From: Defense

More information

The Open Protocol for Access Control Identification and Ticketing with PrivacY

The Open Protocol for Access Control Identification and Ticketing with PrivacY The Open Protocol for Access Control Identification and Ticketing with PrivacY For Secure Contactless Transactions and Enabling Logical and Physical Access Convergence October 2010 Actividentity 2 OPACITY

More information

SAML-Based SSO Solution

SAML-Based SSO Solution About SAML SSO Solution, page 1 SAML-Based SSO Features, page 2 Basic Elements of a SAML SSO Solution, page 2 SAML SSO Web Browsers, page 3 Cisco Unified Communications Applications that Support SAML SSO,

More information

PKI-An Operational Perspective. NANOG 38 ARIN XVIII October 10, 2006

PKI-An Operational Perspective. NANOG 38 ARIN XVIII October 10, 2006 PKI-An Operational Perspective NANOG 38 ARIN XVIII October 10, 2006 Briefing Contents PKI Usage Benefits Constituency Acceptance Specific Discussion of Requirements Certificate Policy Certificate Policy

More information

Public Key Infrastructure PKI. National Digital Certification Center Information Technology Authority Sultanate of Oman

Public Key Infrastructure PKI. National Digital Certification Center Information Technology Authority Sultanate of Oman Public Key Infrastructure PKI National Digital Certification Center Information Technology Authority Sultanate of Oman Agenda Objectives PKI Features etrust Components Government eservices Oman National

More information

Welcome to Centrify DirectControl Agent for Mac, Centrify Endpoint Services

Welcome to Centrify DirectControl Agent for Mac, Centrify Endpoint Services Welcome to Centrify DirectControl Agent for Mac, Centrify Endpoint Services Release Notes for Centrify DirectControl Agent for Mac, Centrify Endpoint Services macos Suite 2017.3 Edition Centrify DirectControl

More information

Florence Blanc-Renaud Senior Software Engineer - Identity Management - Red Hat

Florence Blanc-Renaud Senior Software Engineer - Identity Management - Red Hat TOO BAD... YOUR PASSWORD HAS JUST BEEN STOLEN! DID YOU CONSIDER USING 2FA? Florence Blanc-Renaud (flo@redhat.com) Senior Software Engineer - Identity Management - Red Hat A GOOD PASSWORD: SECURITY THROUGH

More information

PKI is Alive and Well: The Symantec Managed PKI Service

PKI is Alive and Well: The Symantec Managed PKI Service PKI is Alive and Well: The Symantec Managed PKI Service Marty Jost Product Marketing, User Authentication Lance Handorf Technical Enablement, PKI Solutions 1 Agenda 1 2 3 PKI Background: Problems and Solutions

More information

Helping Meet the OMB Directive

Helping Meet the OMB Directive Helping Meet the OMB 11-11 Directive March 2017 Implementing federated identity management OMB Memo 11-11 Meeting FICAM Objectives Figure 1: ICAM Conceptual Diagram FICAM Targets Figure 11: Federal Enterprise

More information

Defense Manpower Data Center CAC/PKI NFC

Defense Manpower Data Center CAC/PKI NFC Defense Manpower Data Center CAC/PKI NFC Bob Gilson Jonathan Shu cacsupport@mail.mil Sep 2012 2 Authentication in the US Government US Government employees must use Personal Iden7ty Verifica7on (PIV) smart

More information

Credential Management in the Grid Security Infrastructure. GlobusWorld Security Workshop January 16, 2003

Credential Management in the Grid Security Infrastructure. GlobusWorld Security Workshop January 16, 2003 Credential Management in the Grid Security Infrastructure GlobusWorld Security Workshop January 16, 2003 Jim Basney jbasney@ncsa.uiuc.edu http://www.ncsa.uiuc.edu/~jbasney/ Credential Management Enrollment:

More information

Mobile Devices as Identity Carriers. Pre Conference Workshop October 14 th 2013

Mobile Devices as Identity Carriers. Pre Conference Workshop October 14 th 2013 Mobile Devices as Identity Carriers Pre Conference Workshop October 14 th 2013 Mobile Market Worldwide Smartphones Market by OS (in thousands of units) 1,400,000 1,200,000 1,000,000 800,000 600,000 400,000

More information

StoreFront :47:53 UTC Citrix Systems, Inc. All rights reserved. Terms of Use Trademarks Privacy Statement

StoreFront :47:53 UTC Citrix Systems, Inc. All rights reserved. Terms of Use Trademarks Privacy Statement StoreFront 2.0 2013-06-30 15:47:53 UTC 2013 Citrix Systems, Inc. All rights reserved. Terms of Use Trademarks Privacy Statement Contents StoreFront 2.0... 5 About this release... 6 Known issues... 9 System

More information

Defense Information System for Security (DISS) Frequently Asked Questions (FAQs)

Defense Information System for Security (DISS) Frequently Asked Questions (FAQs) Defense Manpower Data Center Personnel Security & Assurance Defense Information System for Security (DISS) Frequently Asked Questions (FAQs) Document Version 1.3 28 March 2017 Document History Version

More information

US Federal PKI Bridge. Ram Banerjee VP Vertical Markets

US Federal PKI Bridge. Ram Banerjee VP Vertical Markets US Federal PKI Bridge Ram Banerjee VP Vertical Markets e-gov and PKI Drivers Government Paperwork Elimination and ESIGN Acts Public Expectations Long-term Cost Savings The Need for Privacy and Security

More information

Interagency Advisory Board Meeting Agenda, March 5, 2009

Interagency Advisory Board Meeting Agenda, March 5, 2009 Interagency Advisory Board Meeting Agenda, 1. Opening Remarks (Tim Baldridge, NASA) 2. Federal Identity, Credential, and Access Management (ICAM) The Future of the Government s IDM Strategy (Judy Spencer,

More information

Interagency Advisory Board Meeting Agenda, February 2, 2009

Interagency Advisory Board Meeting Agenda, February 2, 2009 Interagency Advisory Board Meeting Agenda, February 2, 2009 1. Opening Remarks (Tim Baldridge, NASA) 2. Mini Tutorial on NIST SP 800-116 AND PIV use in Physical Access Control Systems (Bill MacGregor,

More information

Accessing DoD Enterprise , AKO, and other DoD websites with Internet Explorer & Edge on your Windows computer

Accessing DoD Enterprise  , AKO, and other DoD websites with Internet Explorer & Edge on your Windows computer Accessing DoD Enterprise Email, AKO, and other DoD websites with Internet Explorer & Edge on your Windows computer Presented by: Michael J. Danberry Last Revision / review: 05 February 2018 Performing

More information

National Cybersecurity Center of Excellence (NCCoE) Mobile Application Single Sign

National Cybersecurity Center of Excellence (NCCoE) Mobile Application Single Sign This document is scheduled to be published in the Federal Register on 11/29/2016 and available online at https://federalregister.gov/d/2016-28627, and on FDsys.gov Billing Code: 3510-13 DEPARTMENT OF COMMERCE

More information

Xceedium Xsuite. Secured by RSA Implementation Guide for 3rd Party PKI Applications. Partner Information. Last Modified: February 10 th, 2014

Xceedium Xsuite. Secured by RSA Implementation Guide for 3rd Party PKI Applications. Partner Information. Last Modified: February 10 th, 2014 Secured by RSA Implementation Guide for 3rd Party PKI Applications Last Modified: February 10 th, 2014 Partner Information Product Information Partner Name Xceedium Web Site www.xceedium.com Product Name

More information

Security and Certificates

Security and Certificates Encryption, page 1 Voice and Video Encryption, page 6 Federal Information Processing Standards, page 6 Certificate Validation, page 6 Required Certificates for On-Premises Servers, page 7 Certificate Requirements

More information

Accessing DoD Enterprise , AKO, and other DoD websites with Internet Explorer & Edge on your Windows computer

Accessing DoD Enterprise  , AKO, and other DoD websites with Internet Explorer & Edge on your Windows computer Accessing DoD Enterprise Email, AKO, and other DoD websites with Internet Explorer & Edge on your Windows computer Presented by: Michael J. Danberry Last Revision / review: 17 September 2017 Performing

More information

ActivCard Strong Authentication product line. Jerome Becquart, Senior Product Manager

ActivCard Strong Authentication product line. Jerome Becquart, Senior Product Manager ActivCard Strong Authentication product line Jerome Becquart, Senior Product Manager A little history Strong Authentication products since 1994 Over 2.5 Millions devices, 1 Million in 2000 alone More than

More information

Implementing and Administering Security in a Microsoft Windows 2000 Network Course 2820 Five days Instructor-led Published: February 17, 2004

Implementing and Administering Security in a Microsoft Windows 2000 Network Course 2820 Five days Instructor-led Published: February 17, 2004 Implementing and Administering Security in a Microsoft Windows 2000 Network Course 2820 Five days Instructor-led Published: February 17, 2004 Introduction This five-day instructor-led course provides students

More information

Public Key Enabling Oracle Weblogic Server

Public Key Enabling Oracle Weblogic Server DoD Public Key Enablement (PKE) Reference Guide Public Key Enabling Oracle Weblogic Server Contact: dodpke@mail.mil URL: http://iase.disa.mil/pki-pke URL: http://iase.disa.smil.mil/pki-pke Public Key Enabling

More information

DoD Common Access Card Authentication. Feature Description

DoD Common Access Card Authentication. Feature Description DoD Common Access Card Authentication Feature Description UPDATED: 20 June 2018 Copyright Notices Copyright 2002-2018 KEMP Technologies, Inc. All rights reserved. KEMP Technologies and the KEMP Technologies

More information

Single Secure Credential to Access Facilities and IT Resources

Single Secure Credential to Access Facilities and IT Resources Single Secure Credential to Access Facilities and IT Resources HID PIV Solutions Securing access to premises, applications and networks Organizational Challenges Organizations that want to secure access

More information

Simplify WAN Service Discovery for Mac Users & Eliminate AppleTalk

Simplify WAN Service Discovery for Mac Users & Eliminate AppleTalk Simplify WAN Service Discovery for Mac Users & Eliminate AppleTalk A Technical Best Practices White Paper Group Logic White Paper October 2010 About This Document The purpose of this technical paper is

More information

Cryptologic and Cyber Systems Division

Cryptologic and Cyber Systems Division Cryptologic and Cyber Systems Division OVERALL BRIEFING IS Someone Scraped My Identity! Is There a Doctrine in the House? AF Identity, Credential, and Access Management (ICAM) August 2018 Mr. Richard Moon,

More information

National Information Assurance Partnership

National Information Assurance Partnership National Information Assurance Partnership TM Common Criteria Evaluation and Validation Scheme Validation Report Public Key-Enabled Application Family of Protection Profiles, Version 2.5 Report Number:

More information

EXHIBIT A: PROJECT SCOPE AND SCHEDULE The Project consists of the activities and delivery dates identified in this Exhibit A, implemented in accordance with the Agreement. The Parties have included a schedule

More information

Encryption Wizard 3.2 User Guide

Encryption Wizard 3.2 User Guide Encryption Wizard 3.2 User Guide Autonomic Trusted Sensing for Persistent Intelligence (ATSPI) Technology Office Last Updated: 19 May 2009 For EW versions >= 3.2.4 This work funded in part by the DDR&E

More information

SAML-Based SSO Solution

SAML-Based SSO Solution About SAML SSO Solution, page 1 Single Sign on Single Service Provider Agreement, page 2 SAML-Based SSO Features, page 2 Basic Elements of a SAML SSO Solution, page 3 Cisco Unified Communications Applications

More information

Creating Trust in a Highly Mobile World

Creating Trust in a Highly Mobile World Creating Trust in a Highly Mobile World Technical White Paper Oct, 2014 MobileCrypt with Hardware Strength Security MobileCrypt s solution leverages an Android based mobile application and a Hardware Security

More information

Application for Smart Card Management User manual

Application for Smart Card Management User manual Application for Smart Card Management User manual for Microsoft Windows systems (7 and newer), Mac OS Warsaw 2019-04-15 tel. + 48 22 390 59 95 email: handlowy@eurocert.pl Content 1. Installation for Windows

More information

DATA SHEET. ez/piv CARD KEY FEATURES:

DATA SHEET. ez/piv CARD KEY FEATURES: Personal Identity Verification (PIV) Card ez/piv Card satisfies FIPS 201, HSPD-12. It allows your users to authenticate to z/os Security Server through the use of a government PIV or CAC Card. KEY FEATURES:

More information

Interagency Advisory Board Meeting Agenda, Wednesday, April 24, 2013

Interagency Advisory Board Meeting Agenda, Wednesday, April 24, 2013 Interagency Advisory Board Meeting Agenda, Wednesday, April 24, 2013 1. Opening Remarks 2. A Security Industry Association (SIA) Perspective on the Cost and Methods for Migrating PACS Systems to Use PIV

More information

Securing Federal Government Facilities A Primer on the Why, What and How of PIV Systems and PACS

Securing Federal Government Facilities A Primer on the Why, What and How of PIV Systems and PACS Securing Federal Government Facilities A Primer on the Why, What and How of PIV Systems and PACS Introduction The expectations and requirements on government contracts for safety and security projects

More information

DoD Identity & Access Management (IdAM) Portfolio Overview

DoD Identity & Access Management (IdAM) Portfolio Overview DoD Identity & Access Management (IdAM) Portfolio Overview UNCLASSIFIED DISA Enterprise Services Directorate (ESD) 17 July 2013 Overview IdAM Concepts & IdAM Portfolio 7/15/13 UNCLASSIFIED 1 IdAM Overview

More information

August, Actividentity CTO Office

August, Actividentity CTO Office The Open Protocol for Access Control Identification and Ticketing with PrivacY For the Secure Enablement of converged Access and Contactless Transactions August, 2010 Actividentity CTO Office 2 What is

More information

There is an increasing desire and need to combine the logical access and physical access functions of major organizations.

There is an increasing desire and need to combine the logical access and physical access functions of major organizations. Introduction There is an increasing desire and need to combine the logical access and physical access functions of major organizations. This can be as simple as merely having an access card that can be

More information

STRS OHIO Telework F5 BIG-IP Edge Client for Mac Systems (Imac, Air, Macbook, Mini) User Guide

STRS OHIO Telework F5 BIG-IP Edge Client for Mac Systems (Imac, Air, Macbook, Mini) User Guide STRS OHIO Telework F5 BIG-IP Edge Client for Mac Systems (Imac, Air, Macbook, Mini) User Guide For assistance, please contact the ITS Service Desk at x4357 or 227-8633. Table of Contents First Time Use

More information

Mobile Derived Credentials Purebred Information Brief

Mobile Derived Credentials Purebred Information Brief Mobile Derived Credentials Purebred Information Brief Disclaimer The information provided in this briefing is for general information purposes only. It does not constitute a commitment on behalf of the

More information

CERTIFICATE POLICY CIGNA PKI Certificates

CERTIFICATE POLICY CIGNA PKI Certificates CERTIFICATE POLICY CIGNA PKI Certificates Version: 1.1 Effective Date: August 7, 2001 a Copyright 2001 CIGNA 1. Introduction...3 1.1 Important Note for Relying Parties... 3 1.2 Policy Identification...

More information

Changes to SP (SP ) Ketan Mehta NIST PIV Team NIST ITL Computer Security Division

Changes to SP (SP ) Ketan Mehta NIST PIV Team NIST ITL Computer Security Division Changes to SP 800-73 (SP 800-73-4) Ketan Mehta NIST PIV Team NIST ITL Computer Security Division mehta_ketan@nist.gov Smart Card Alliance, Government Conference October 30, 2014 Draft SP 800-73-4 Removed

More information

Sub Rosa for ios. User Guide. Copyright Thursby Software Systems, Inc.

Sub Rosa for ios. User Guide. Copyright Thursby Software Systems, Inc. Sub Rosa for ios User Guide Copyright 2011-2017 Thursby Software Systems, Inc. Description 3 Installing and First Launch 3 Using Sub Rosa 4 Gestures 5 Sub Rosa User Interface 5 1. Card Slot Status 5 2.

More information

KeyOne. Certification Authority

KeyOne. Certification Authority Certification Description KeyOne public key infrastructure (PKI) solution component that provides certification authority (CA) functions. KeyOne CA provides: Public key infrastructure deployment for governments,

More information

Identity Synchronization Service Machine Interface (IdMI) NIPRNet Customer Interface Specification Between. <<Component>> and

Identity Synchronization Service Machine Interface (IdMI) NIPRNet Customer Interface Specification Between. <<Component>> and Identity Synchronization Service Machine Interface (IdMI) NIPRNet Customer Interface Specification Between and DISA Enterprise Services Directorate Enterprise Infrastructure Division 27 December

More information

Intel Security/McAfee Endpoint Encryption

Intel Security/McAfee Endpoint Encryption RSA Ready Implementation Guide for RSA SecurID Last Modified: March 13, 2015 Partner Information Product Information Partner Name Intel Security formerly McAfee Web Site www.mcafee.com Product Name for

More information

Defense Information Systems Agency (DISA) Department of Defense (DoD) Cloud Service Offering (CSO) Initial Contact Form

Defense Information Systems Agency (DISA) Department of Defense (DoD) Cloud Service Offering (CSO) Initial Contact Form Defense Information Systems Agency (DISA) Department of Defense (DoD) Cloud Service Offering (CSO) Initial Contact Form Page 1 of 5 Submitted to DISA s DoD Cloud Support Office by: Signature (Prefer CAC

More information

Guide Installation and User Guide - Mac

Guide Installation and User Guide - Mac Guide Installation and User Guide - Mac With Fujitsu mpollux DigiSign Client, you can use your smart card for secure access to electronic services or organization networks, as well as to digitally sign

More information

Sphinx Feature List. Summary. Windows Logon Features. Card-secured logon to Windows. End-user managed Windows logon data

Sphinx Feature List. Summary. Windows Logon Features. Card-secured logon to Windows. End-user managed Windows logon data Sphinx List Summary Version Order # Included software components Sphinx Enterprise S-30 Install Sphinx Logon Manager software and desktop card readers on end-user computers. Pre-configured Sphinx CardMaker

More information

Identity and Authentication PKI Portfolio

Identity and Authentication PKI Portfolio Identity and Authentication PKI Portfolio Gemalto offers comprehensive public key infrastructure (PKI) authentication solutions that provide optimal levels of security. Supporting a wide portfolio of IDPrime

More information

Enabling Smart Card Logon for Linux Using Centrify Suite

Enabling Smart Card Logon for Linux Using Centrify Suite DoD Public Key Enablement (PKE) Reference Guide Enabling Smart Card Logon for Linux Using Centrify Suite 2012.4 Contact: dodpke@mail.mil URL: http://iase.disa.mil/pki-pke/ URL: http://iase.disa.smil.mil/pki-pke/

More information

Making DoD Enterprise , AKO, and other DoD websites work with Internet Explorer on your Windows computer.

Making DoD Enterprise  , AKO, and other DoD websites work with Internet Explorer on your Windows computer. Making DoD Enterprise Email, AKO, and other DoD websites work with Internet Explorer on your Windows computer. Presented by: Michael J. Danberry Last Revision / review: 22 February 2015 Performing these

More information

End User Device Strategy: Interoperability Standards

End User Device Strategy: Interoperability Standards End User Device Strategy: Interoperability Standards This document defines the target architecture for cross government interoperability standards and interfaces between a government End User Device and

More information

McAfee Endpoint Encryption

McAfee Endpoint Encryption Secured by RSA Implementation Guide for SecurID Authenticators Last Modified: December 4, 2013 Partner Information Product Information Partner Name McAfee Web Site www.mcafee.com Product Name (EEPC) Version

More information

Certification Authority

Certification Authority Certification Authority Overview Identifying CA Hierarchy Design Requirements Common CA Hierarchy Designs Documenting Legal Requirements Analyzing Design Requirements Designing a Hierarchy Structure Identifying

More information

Welcome to Centrify DirectControl for Mac OS X

Welcome to Centrify DirectControl for Mac OS X Welcome to Centrify DirectControl for Mac OS X Release Notes for Centrify DirectControl version 5.1.1- mac10.9 for Mac OS X Centrify DirectControl for Macintosh provides Active Directory-based authentication,

More information

Secure your Snow Leopard

Secure your Snow Leopard Secure your Snow Leopard Benjamin Stanley apple Certified Trainer Structure of OS Safer Browsing System Prefs that help with security Managed prefs from server Keychain Hardware security AV and a little

More information

Who s Protecting Your Keys? August 2018

Who s Protecting Your Keys? August 2018 Who s Protecting Your Keys? August 2018 Protecting the most vital data from the core to the cloud to the field Trusted, U.S. based source for cyber security solutions We develop, manufacture, sell and

More information

70-742: Identity in Windows Server Course Overview

70-742: Identity in Windows Server Course Overview 70-742: Identity in Windows Server 2016 Course Overview This course provides students with the knowledge and skills to install and configure domain controllers, manage Active Directory objects, secure

More information

Mac OS X version 10.6 and Below for Students

Mac OS X version 10.6 and Below for Students Mac OS X version 10.6 and Below for Students The University Technology Services is privileged to offer a secure wifi network to the university community. Connecting to this network will provide you with

More information

NotifySCM Integration Overview

NotifySCM Integration Overview NotifySCM Integration Overview TABLE OF CONTENTS 1 Foreword... 3 2 Overview... 4 3 Hosting Machine... 5 3.1 Installing NotifySCM on Linux... 5 3.2 Installing NotifySCM on Windows... 5 4 Network Configuration...

More information

Managed Access Gateway Third-Party Credential User Guide August 2017

Managed Access Gateway Third-Party Credential User Guide August 2017 Managed Access Gateway Third-Party Credential User Guide August 2017 Copyright 2017 Exostar, LLC All rights reserved 1 Contents Audience... 3 How to Register for a New MAG Account with your Third-Party

More information

the SWIFT Customer Security

the SWIFT Customer Security TECH BRIEF Mapping BeyondTrust Solutions to the SWIFT Customer Security Controls Framework Privileged Access Management and Vulnerability Management Table of ContentsTable of Contents... 2 Purpose of This

More information

for Unclassified Systems

for Unclassified Systems DoD Public Key Enablement (PKE) Reference Guide InstallRoot 5.0 User Guide Contact: dodpke@mail.mil URL: http://iase.disa.mil/pki-pke InstallRoot 5.0 User Guide for Unclassified Systems 7 December 2015

More information

Willis Mobile Device Access Security Policy. Date: July-2014 Version: 2.0 FINAL

Willis Mobile Device Access Security Policy. Date: July-2014 Version: 2.0 FINAL Willis Mobile Device Access Security Policy Date: July-2014 Version: 2.0 FINAL Willis Mobile Device Access Security Policy v2.0.docx Page: 1/8 30-Jul-2014 Contents Introduction... 3 Supported Platforms...

More information

Unit OS7: Security The Security Problem. Windows Operating System Internals - by David A. Solomon and Mark E. Russinovich with Andreas Polze

Unit OS7: Security The Security Problem. Windows Operating System Internals - by David A. Solomon and Mark E. Russinovich with Andreas Polze Unit OS7: Security 7.1. The Security Problem Windows Operating System Internals - by David A. Solomon and Mark E. Russinovich with Andreas Polze 2 Copyright Notice 2000-2005 David A. Solomon and Mark Russinovich

More information

Final Project Report. Abstract. Document information

Final Project Report. Abstract. Document information Final Project Report Document information Project Title SWIM security solutions Project Number 14.02.02 Project Manager THALES Deliverable Name Final Project Report Deliverable ID D01 Edition 00.01.00

More information

DoD PKI Automatic Key Recovery

DoD PKI Automatic Key Recovery DoD PKI Automatic Key Recovery (520) 538-8133, DSN 312-879-8133, or 866-738-3222, Netcom-9sc.om-iacacpki.helpdesk@mail.mil Fort Huachuca, AZ 85613-5300 14 March 2017 Mike Danberry last reviewed on 12 January

More information