Streamlined Secure Access to Privileged Information, Services, and Applications
Ensuring secure remote access to enterprise information is essential as companies continue to move their business processes online and extend the enterprise boundary beyond the corporate firewalls. Unfortunately, many organizations today still rely on static, reusable passwords, thereby exposing enterprise information to access by unauthorized users. The ActivIdentity Secure Remote Access Solution provides everything you need to identify users with certainty and confirm network privileges, enabling you to:

• Increase productivity by allowing your remote employees to access information from anywhere, anytime

• Save time and money by securely moving business processes to the web, eliminating time-consuming and costly manual intervention

• Improve efficiency by allowing partners, customers, and suppliers to securely access the critical information that they need to do business

• Increase security with WLAN protection by requiring two-factor authentication for remote access to critical corporate resources
  

The ActivIdentity Secure Remote Access Solution consists of three packages: Tokens, USB Keys, or Smart Cards, which can be deployed concurrently to match your company' specific requirements. All solutions are anchored with an ActivIdentity AAA Server that validates one time passwords and a device that generates them. More functional USB Key and Smart Card Packages require ActivClient software on the client desktop to control communication with the card.

• Tokens
  Tokens are a well established and simple to deploy solution for secure remote access since no client software is required. ActivIdentity AAA Server software and ActivIdentity software or hardware tokens are all you need for the most basic solution.

• USB Keys
  USB Keys are a cost-effective way of getting the benefits of a multi-function smart card without the cost of purchasing and deploying smart card readers. ActivIdentity USB Key is actually a smart card in a USB key package. Simply plug it into your PC and you're ready to go. ActivPack AAA Server software, ActivClient software, and an ActivIdentity USB key is what is takes for this economical smart card solution.

• Smart Cards
  Smart Cards can get you the most functionality for your investment. Do you already carry an employee ID card? Do you have a physical access badge? And maybe a remote access token? Combine all these pieces into a single smart card solution in the form of an Enterprise Access Card. An Enterprise Access Card solution requires ActivIdentity AAA Server Software, ActivClient software, your choice of serial, USB, or PCMCIA smart card reader, and an ActivIdentity Smart Card. Deploying this solution not only saves you money by consolidating your physical and logical security budget, it also allows you to secure the local and remote desktop. In addition, it prepares your company to take advantage of more sophisticated secure identity management solutions by upgrading to ActivIdentity’s Card Management System.

Compelling ROI
For companies currently using two-factor authentication, the ActivIdentity Secure Remote Access Solution can be deployed without increasing your existing security budget. The result is a compelling total cost of ownership and return-on-investment advantage that is achieved by:

• Lifetime replacement of tokens.
  ActivIdentity tokens do not expire and come with a lifetime replacement policy - avoiding the cost of replacing token hardware and extending the time between re-deployment of new tokens.

• Eliminating dual administration.
  The ActivIdentity Secure Remote Access Solution leverages your existing corporate directory and does not require its own user database. Saving time for a system administrator.

• Substantially reducing help desk costs.
  Deploying an ActivIdentity smart card or USB key solution enables you to eliminate all re-synchronization calls by deploying challenge/response and allowing the smart card to handle the complexity. In addition, you can reduce password re-set calls by securely storing static passwords on your smart card, so users only have to remember their self-managed PIN.

• Consolidating credentials.
  ActivIdentity smart card solutions enable the secure storage and management of all your static passwords, one-time password (OTP) credentials as well as PKI private keys and associated certificates. The ActivIdentity device becomes what amounts to a key ring for all your corporate digital identity credentials - with the benefit of convenience for the user and cost-effective management consolidation for the organization.

Familiar and Easy to Use
By consolidating multiple authentication credentials on a single smart card device, the ActivIdentity Secure Remote Access Solution enables a user experience that is as simple and familiar as using an ATM card. This ATM-like experience applies to VPN access as well. Users simply enter their PIN on their keyboard to access the credentials on their card. The ActivIdentity software then authenticates the user, configures the VPN session and makes a connection-all transparent to the user saving time and reducing complexity.

Smooth Bridge and Migration
The ActivIdentity Secure Remote Access Solution allows you to migrate smoothly from legacy single factor token devices to more advanced smart card and PKI-based technologies without having to replace your existing infrastructure.

The PIN is one of the secret factors in two-factor authentication and needs to be protected. Unlike some competing products, the ActivIdentity solution never sends a user's PIN across the network. With ActivIdentity, the PIN only exists on the device and in the mind of the user.

Enhanced Security
WLAN attackers can access your network from the parking lot, making WLAN simply another form of remote access to the network. The ActivIdentity Secure Remote Access Solution has integrated 802.1X authentication required by the WiFi Alliance as well as the upcoming 802.11i standard.

For customers who want to guarantee personal control of their secret keys, the ActivIdentity Secure Remote Access Solution allows local initialization of devices and PIN management by the user. When deploying smart card devices, all private keys are generated and stored on the smart card providing FIPS-140-2 level strong storage and protection from hackers.

In addition, the ActivIdentity solution does not require a separate user store. ActivIdentity integrates with your corporate directory. This prevents an increasingly common security risk that occurs when employees are removing an employee from the corporate directory and mistakenly leave their record open in a separate remote access database.

Easy Implementation and Administration
The ActivIdentity Secure Remote Access Solution is designed from the ground up to be standards-based and to work with your existing network infrastructure:

• Management with your existing infrastructure.
  ActivIdentity AAA Server supports LDAP directories and SQL compatible databases. This enables users and their access rights to be managed centrally without the need to modify the existing corporate directory infrastructure. It natively supports both RADIUS and TACACS+ and does not require deployment of proprietary agents.

• Centralized administration and distributed authentication. ActivIdentity AAA Server allows for central administration of users, roles, and policies while authentication occurs in the field--where you need it. The solution eliminates the need to deploy one-off, disparate authentication solutions for the various entry points into your network.

• Deployability.
  The ActivIdentity client software, ActivClient, is fully MSI compatible, supports custom setups, blind installs, and works with all market leading software push technologies.