Microsoft Reaches Out
At the RSA Conference in San Francisco, RSA and Microsoft announced a token-based authentication solution, RSA's SecurID system for Microsoft Windows. The solution, slated to ship in the third quarter, combines familiar user passwords with token IDs to ensure that desktops and networks are accessible only to authorized users.
Likewise, VeriSign said it is working with Microsoft to combine Microsoft Windows Server 2003 with VeriSign's authentication services. Plans call for allowing seamless provisioning of desktop PKI credentials to include one-time password (OTP) tokens, PKI tokens and smart cards. The service,expected this summer,also will allow administrators to use Microsoft Active Directory and Microsoft Management Console to manage users and provision credentials.
OTHER RSA NEWS:
>>WS-I releases Web services security scenarios.
>>Top vendors form Cyber Security Industry Alliance.
>>Homeland security chief criticizes cyber-terrorists.
"The use of a token in conjunction with user ID and password will improve security. This is particularly important for portable devices that are subject to theft where proprietary information could be obtained," said Anthony Harbour, president and CEO of Harbour and Associates, a solution provider in Glen Ellen, Va.
Other solution providers said they were pleased that Microsoft is seeking outside help for security from ISVs, but that they are more interested in Microsoft's release of no-cost Windows security updates and patch management solutions this year.
At the RSA show last week, Microsoft Chairman and Chief Software Architect Bill Gates demonstrated the company's planned Windows XP Service Pack 2 with new Windows Firewall and Windows Security Center features and said the Windows desktop update is on track to ship during the first half of 2004 along with Software Update Services 2.0, Microsoft Update and ISA Server 2004.
According to a Microsoft source, however, beta testing for Software Update Services 2.0 is now scheduled for late in the first quarter, with the final release set for late in the second quarter. Microsoft promised an early first-quarter beta and a release in May, but one source close to Microsoft said he doubts the company will hit those dates.