Microsoft®’s Forefront Needs More Than Identity Management for Cyber Attack Prevention
Microsoft ‘s Forefront Identity Manager (FIM) 2010 provides IT with the tools needed for identity and access management through a SharePoint-based policy management console. Microsoft correctly targets the importance of identity management for users, devices, and services due to cyber attacks, regulatory mandates and privacy protection compliance. While FIM 2010 is designed around secure identity management, the logical question follows: How is the user properly identified during Windows authentication?
FIM 2010 has integrated passwords and certificates functions with smartcards to deliver a secure network. If the first link in the chain is insecure then the entire network is also insecure. Can you really trust and know who really is logging in, accessing files or purchasing unauthorized services? Smartcards two- or three- factors of authentication capabilities are a key component to establish trust.
Users who manual type in a user name and password are the weakest link in computer, network or cloud authentication. Not because passwords are insecure, but because how users choose and manage their passwords.
- Using a simple, easy to remember password
- Password written on sticky notes and posted on their monitors
- Using the same password for the company’s network as they use for their PlayStation account
- And not having proper malware protection on a home computer that allow thieves to steal passwords with a keylogger.
When combined with the functions and features of an ID badge, smartcards gives IT a single, secure credential to control the issuance, management and access within an entire organization. From the user’s perspective they insert a card into a reader, type a single PIN and/or present their finger to a biometric reader and that’s it. FIM 2010 does the rest. A win-win for IT since they have increased security and it’s convenient for the user – no more complex passwords to remember or type.
But which smartcard authentication is best, a password manager or a digital certificate. Both technologies have their pros and cons (see our “Security Technology Comparison” white paper). The better questions are: what is the environment, cost considerations, time to implement, value of data being protected, etc.? Certificate systems, especially Public Key Infrastructure (PKI), are very secure but also very expensive for most businesses to implement. Many systems require expensive smartcard chips, hardware modifications to the server, relationships with Certificate Authorities, annual certificate renewal fees, non-transferal of certificates when there is employee turnover, advanced IT training, and typically years to fully integrate. Certificates are great for those people that have to digitally sign documents and want the non-repudiation, but it’s not something every employee needs.
Access Smart® created a secure password manager for Windows called Power LogOn®. The user simply authenticates themselves with a PIN and/or biometric.
- No more manually entering passwords that keyloggers can pick up.
- No more employees writing passwords on sticky notes for others to find.
- No more using the same simple password for every account.
Since Power LogOn has no annual subscription/renewal fees, no back-end server modifications, no extensive training and licenses are transferable makes Power LogOn affordable from the single business owner up to the large corporations, agencies and institutions. Power LogOn usually takes IT only a couple of days to fully implement thus implementing security faster than any certificate based solution. Power LogOn can also be configured to deliver up to 8-levels of authentication assurances.
- Something you have
- Something you know
- Something you are
- Something the card has
- Something the card knows
- Something the server and card knows
- Something an application and card knows
FIM 2010 focuses on Identity Management and Power LogOn addresses user authentication; together businesses and their employees have an integrated permissions based secure network. IT can eliminate the manual logon processes that cannot truly authenticate a user. Finally, with the low cost of ownership security is no longer determined by accountants but by the businesses desire to deliver privacy protection confidence to their customers.
Dovell Bonnett
Founder & CEO
Access Smart
27762 Antonio Pkwy, L1-461
Ladera Ranch, CA 92694
Office: 949-218-8754
Website: www.Access-Smart.com
