IDENTIKEY Server 3.4
IDENTIKEY Server 3.4 is an authentication software suite for organizations of all sizes that
want to address their concerns about secure access with a state-of-the-art solution
Being able to work remotely is one of the most valuable - and most vulnerable - features in a corporate network. Today
one simply cannot afford to leave important systems and valuable data unprotected. IDENTIKEY Server 3.4 is the simplest
and most cost-effective solution to help authenticate remote and local users accessing the corporate network. Using an
individually assigned DIGIPASS authenticator, remote and local users will be able to proof their claimed identity quickly and
easily through a dynamically generated one-time password (OTP). In a similar way, electronic signatures can be generated
and used for secure validation of financial transactions.
ONLINE BANKING
IDENTIKEY Server 3.4 offers strong authentication and validation
of transaction signatures with support of EMV-CAP to address
the need for e-signatures in commercial and banking webbased applications, such as online shops, B2B portals and
online retail banking applications.
The optional HSM support allows OTP and signature validation
inside a tamper-proof security module. IDENTIKEY Server 3.4 is
full PCI-DSS compliant and can immediately be integrated into
existing banking infrastructures.
REMOTE ACCESS IN ENTERPRISE SECURITY
With the increasing number of mobile employees and
home-based staff, the need for remote access to corporate
applications and resources has surged.
Network administrators face new challenges to fulfill growing
requests for flexible yet secure access to in-house applications
such as Outlook Web Access or Citrix Web Interface as they
need to be protected with strong authentication.
IDENTIKEY Server 3.4 provides the answer to these demands
by offering secure authentication for remote access and login to
web-based applications.
SOFTWARE AS A SERVICE
A number of industry analysts have highlighted the emerging
trend of Software as a Service. Also known as on-demand
applications or hosted applications, this new form of software
deployment is slowly replacing the more traditional, desktopbased software.
IDENTIKEY Server 3.4 can be integrated using SOAP into
any Internet application to protect the user login with strong
authentication.
www.identikey.com
FEATURES
•DIGIPASS two-factor authentication
•e-signature for transaction validation
•Support for EMV-CAP and Hardware Security Module (HSM)
• PCI-DSS compliancy
•Support of RADIUS and Microsoft IIS web server based clients (Outlook Web Access, Citrix Web Interface)
•Support for Internet hosted applications through SOAP
•Active Directory integration, ODBC database support
•Support of LDAP back-end authentication environments
•Enhanced features for DIGIPASS and user management
•Delegated administration, multiple administration interfaces
•Virtual DIGIPASS (over SMS or Email) support, also as backup
•Support of wireless protocols & the return of RADIUS attributes
•Auditing of RADIUS accounting requests
FUNCTIONS
•Verification of authentication requests (OTP, signature)
•Web-based administration GUI offers all administration
functions in a single browser window.
•Central administration of users and DIGIPASS authenticators
•Software DIGIPASS provisioning (DIGIPASS for Mobile)
•Comprehensive audit system, with storage in a database or
text file and an optional live audit viewer.
•Activity reporting with output in XML/HTML format
•Validation of DIGIPASS Authentication for Windows Logon for
locally connected users, in online and offline more
BENEFITS
•Easy to implement strong user authentication
•VACMAN core technology: proven at major banks worldwide
•Designed to fit the needs of an organization of any size
•‘Out-of-the-box’ solution, flexible to allow custom integration
•Easy to install, administer and support
•Easy to integrate in existing infrastructure
•Seamless solution: use existing infrastructure
•Extremely low TCO ‘total cost of ownership’
•High availability through server replication and load balancing
The world’s leading software company specializing in Internet Security
www.vasco.com
STRONG, TWO FACTOR AUTHENTICATION
The combination of IDENTIKEY Server 3.4 and DIGIPASS provides strong
user authentication compared to reusable static passwords. IDENTIKEY
Server 3.4 can be easily implemented in any IT environment and
provides a turnkey solution that can be operational in a very short time.
SUPPORTED ENVIRONMENTS
Operating System
(Windows version)
• Windows Server 2003 (32 & 64 bit) with SP2
and above, or R2.
• Windows Server 2008 (32 & 64 bit)
• Windows Server 2008R2 (64 bits)
• SBS2003 SP1+, SBS2008 SP2+, SBS2011
• Windows 7 (*)
• Windows XP SP3 and above(*)
• Windows Vista SP2 and above(*)
(*) can be used for very small deployments as
well as for testing and demonstration purposes.
Operating System
(Linux version)
• Novell Suse Linux Enterprise server 11
• Ubuntu 10.04 Server Edition
• Redhat Enterprise Linux version 6.1
• 32 and 64 bits versions
Virtual Images
• VMWare ESXi Server version 4.1
• VMWare Player version 2.5
• VMWare Workstation version 7
• Citrix Xenserver 6.0
Supported
Webservers
• Apache Tomcat 6.0
• IBM WebSphere 7.0
Data store (DBMS)
• Oracle 11g (32 & 64-bit)
• Microsoft SQL server 2005, 2008 (32&64-bit)
• IBM DB2 8.1 (32-bit) and 9.1 (64-bit)
• PostgreSQL 8.3.1 (32 & 64-bit)
Data store
(Active Directory)
• Windows Server 2003 AD
• Windows Server 2008 AD
LDAP Back End
Authentication
• Windows Server 2003 AD
• Windows Server 2008 AD
• Novell e-Directory 8.7+
• Microsoft ADAM (WS2003 R2)
• IBM TAM Directory Server 6.2+
HSM
• Safenet Protect Server Gold
TRANSACTION VALIDATION
IDENTIKEY Server offers highly secure electronic signature validation for
banks and financial institutions by implementing EMV-CAP support and
support for Hardware Security Module (HSM) to validate the signature in
a secure and tamper-proof environment.
INTEROPERABILITY AT THE FRONT-END
IDENTIKEY Server 3.4 uses a non-intrusive method of enabling DIGIPASS
authentication. It can be integrated using RADIUS, with Microsoft IISbased applications such as Outlook Web Access or Citrix Web Interface,
or with any Internet application using SOAP.
MULTI-PLATFORM AT THE BACKEND
Offering a broad choice of supported platforms, IDENTIKEY Server 3.4
can be conveniently used on most common server operating systems,
such as MS Windows and Linux, both in 32 and 64 bit versions.
Additional back-end static password verification can be performed using
RADIUS servers or LDAP back-end servers.
ACTIVE DIRECTORY INTEGRATION
The highest convenience and efficiency when adding strong
authentication is achieved by using the Active Directory service. The
DIGIPASS related data is stored with the users in the Active Directory.
WIDE RANGE OF SUPPORTED DATABASES
IDENTIKEY Server 3.4 also supports a wide range of ODBC compliant
databases for data storage and ships standard with PostgreSQL (32-bit).
WEB-BASED USER INTERFACE
All administration functions are available through a web-based user
interface, allowing remote administration and creating new opportunities
for managed security services providers.
AUDITING AND REPORTING
The audit console monitors incoming and outgoing events on the
IDENTIKEY Server 3.4. Informational statistics gathered by the audit
console provides critical details necessary to effectively manage a
remote access environment. Extensive XML or HTML-formatted reporting
is provided for helpdesk troubleshooting, system- and security auditing
and accounting purposes.
COMPLIANCE TO STANDARDS
RADIUS
RFC 2865 and RFC 2866
Wireless
EAP, PEAP
Authentication
• DIGIPASS OTP (Challenge / Response,
Response Only)
• DIGIPASS Signature (transaction validation)
• OATH (event based – time based)
• EMV-CAP
About VASCO
VASCO designs, develops, markets and supports patented DIGIPASS®, DIGIPASS PLUS®, VACMAN®, IDENTIKEY® and aXs GUARD® authentication products
for the financial world, remote access, e-business and e-commerce. With tens of millions of products sold, VASCO has established itself as the world leader
in Strong User Authentication for e-Banking and Enterprise Security for blue-chip corporations and governments worldwide.
www.vasco.com
BRUSSELS (Europe)
phone: +32.2.609.97.00
email: [email protected]
BOSTON (North America)
phone: +1.508.366.3400
email: [email protected]
S Y D N E Y ( Pa c i f i c )
phone: +61.2.8061.3700
email: [email protected]
SINGAPORE (Asia)
phone: +65.6323.0906
email: [email protected]
Copyright © 2012 VASCO Data Security, Inc, VASCO Data Security International GmbH. All rights reserved. VASCO®, Vacman®, IDENTIKEY®, aXsGUARD®,
®
DIGIPASS® and
logo are registered or unregistered trademarks of VASCO Data Security, Inc. and/or VASCO Data Security International GmbH in the U.S.
and other countries. VASCO Data Security, Inc. and/or VASCO Data Security International GmbH own or are licensed under all title, rights and interest in VASCO
Products, updates and upgrades thereof, including copyrights, patent rights, trade secret rights, mask work rights, database rights and all other intellectual
and industrial property rights in the U.S. and other countries. Microsoft and Windows are trademarks or registered trademarks of Microsoft Corporation.
Other names may be trademarks of their respective owners. DS-201202-v1
">
