CryptoCard Speeds Sign Ons

In an attempt to protect valuable corporate data, many businesses have incorporated complex security schemes that are difficult for end users to navigate. Having to remember multiple cryptic passwords and follow repetitive logon authentication schemes for each application often causes end users to circumvent best practices using a variety of methods. End users often write down passwords and leave them in conspicuous places, frequently harass help-desk personnel to tell them their passwords or reset them, or use simplistic, hack-prone logon names and passwords. The more complex the login process, the more likely end users will violate best practices and create security problems for their employers.

FRANK J. OHLHORST Technology Editor

For solution providers these issues spell opportunity that can be met by single sign-on (SSO) technologies. SSO simplifies the security and logon process by consolidating multiple security schemes under a single authentication process. In other words, a user can sign on once to a computer and have secure, protected access to multiple applications.

What's more, SSO-based technologies can introduce token-based access, which combines the two most recognizable elements of practical security methodology: something the user knows and something the user possesses. The combination of an electronic key, such as a token, smart card or tag, and a secret password can block almost any unauthorized access while still bringing ease of use to the legitimate user.

CryptoCard's Crypto-Server 6.1, a server-based software suite, combines tools that allow solution providers to deploy a complete SSO solution. The suite includes Crypto-Server, Crypto-Console, Crypto-VPN, Crypto-Web, Crypto-Logon, Crypto-Deploy, Crypto-Kit and RSA Migration. When combined, these tools offer a complete SSO solution that balances securitys best practices with an easy-to-use technology.

Crypto-Server 6.1 can be integrated into either an Active Directory or an LDAP-based security scheme and uses Crypto-Console to manage the solution. Crypto-VPN brings the company's simple and secure authentication process to corporate VPNs. Crypto-Logon replaces static password-based logons with a token-based security scheme on user access platforms.

Meanwhile, Crypto-Deploy delivers software-based tokens using a browser interface and can also recognize and synchronize most varieties of hardware-based tokens. To further extend the package's capabilities, Crypto-Web brings token-based authentication to selected areas of a company's Web site.

Companies already working with token-based solutions, such as RSA, will appreciate the inclusion of the RSA Migration application in CryptoCard's products. RSA tokens have a limited life span and can be replaced with CryptoCard's lifetime, nondisposable tokens without disrupting the end user's experience.

Solution providers will find the Crypto-Server suite quite easy to work with. Installation is wizard-based and well-documented. The various tools are easy to grasp and integrate into existing platforms, and the platform's simple management functions should ease the burden on overloaded IT managers.

The product could benefit from more extensive reporting options, especially when it comes to calculating the package's ROI. ROI numbers can fuel expansion of the installation. ROI information is also a great sales tool, giving solution providers and their customers valuable evidence of the effectiveness of CryptoCard's platform.

CryptoCard's Crypto-Server 6.1 includes single sign-on capabilities, allowing users to log in to multiple applications, e-mail accounts, IM sessions, Web sites, etc. through a single sign-on action. The solution also includes a token-based schema that adds security to logons and simplifies the process for users.

One of the CryptoCard solution's biggest advantages is a concept called "follow me computing." Users equipped with a USB token and PIN can securely access a session running under Microsoft Terminal Server or Citrix from almost computer.

CryptoCard's three-tier channel program, which has existed for two years, provides varying levels of solution provider-centric sales and technical support and co-op funds. The vendor also offers its partners sales and technical training, joint sales call support, development tools and other assistance.

CryptoCard does not currently offer a dedicated solution provider Web portal, but will offer such a site in the future. CryptoCard offers margins in the 30 percent range for partners in its channel program. CHANNEL PROGRAM SNAPSHOTS
> CRYPTO-SERVER 6.1
COMPANY: CryptoCard
Ontario, Canada
(800) 307-7042
www.cryptocard.com
DISTRIBUTORS: 4Front, Burwood Group, Charon Systems, Pegasus Technologies, Pomeroy, Sword & Shield, Tech Data
TECH RATING:
CHANNEL RATING:

Note: Vendors can earn up to five stars for technical merit and five for their channel program. If the average of these two scores is four stars or greater, the product earns CRN Test Center Recommended status.