CRYPTOCard Launches CRYPTO-Server 6.3 for Linux at LinuxWorld Canada: The First Two-Factor Authentication

1 January 1970

CRYPTOCard (www.cryptocard.com), a leader in authentication technology, will today launch CRYPTO-Server 6.3 for Linux, the first authentication solution designed specifically for Red Hat (NASDAQ: RHAT - News) Enterprise Linux 3 server and SUSE Linux Enterprise Server 9 server platforms at an official LinuxWorld Canada press launch in the media room (203C) of the Metro Toronto Convention Centre at 11:30 a.m. EST on Tuesday, April 19. CRYPTOCard (booth 925) will demonstrate CRYPTO-Server 6.3's centralized authentication and management capability, emphasizing ease-of-use and tight integration with LDAP directory services and SOX (Sarbanes Oxley) compliant functionality.

Visitors will also learn how to enforce two-factor authentication as the only way to access a Linux workstation, in addition to locking down access through VPN's, Portals, web servers and more, regardless of the desktop computing environment. A five-user bundle (all-you-need-in-1-box - the full server software plus five tokens, of any type) is available for immediate purchase at Linux World as a 'Show Only Special - Introductory Offer' for $249.00 (U.S.).

"It is becoming increasingly obvious that an organization cannot guarantee system security if it cannot authenticate each individual user - and CRYPTO-Server 6.3's CRYPTO-Logon functionality now makes this a simple process for the fast-growing number of Linux users," explained Malcolm MacTaggart, President & CEO, CRYPTOCard Corporation. "CRYPTOCard is proud to be the first authentication provider to provide Linux users with true ATM-style 'One-PIN-and-You're-In' secure desktop, web, and remote access."

CRYPTOCard provides two-factor authentication/identity management solutions in 3 primary areas - Desktop Logon, Remote Access, and Web Access. Any PAM-based application, or server, can be protected by CRYPTOCard's Secure Password Technology in the Linux or OS X environments.

Incorporating CRYPTOCard's familiar ATM-style logon, that has proven to eliminate the user resistance usually encountered when organizations attempt to implement an additional layer of security, CRYPTO-Server 6.3 for Linux couples something in the user's possession (a multi-function smart card, hardware token, or software token), with something the user knows (their PIN), to make it simple to positively identify all Linux users attempting VPN or Web-based access. To logon to their workstation, VPN concentrator, or web site, the user simply enters the one-time-password displayed on their token which authenticates against the CRYPTO-Server. For desktop logons removing the card, locks down display manager (KDM, GDM, XDM) and starts up the screen saver.

By generating a unique password for every log-on attempt, CRYPTO-Server 6.3 makes stolen credentials useless to hackers while simultaneously ensuring users no longer have to memorize complicated credentials - significantly reducing the help-desk costs associated with resetting forgotten passwords, and the obvious security risk resulting from users writing down their passwords.

CRYPTO-Logon uses PAM (Plugable Authentication Module) for authentication and a monitoring daemon to detect who has logged on, and when a card has been extracted. Smart card and USB tokens can provide workstation lock-down on card, or USB token extraction. CRYPTO-Logon works with Xscreensaver for screen and desktop lock-down.

CRYPTO-Server's remote access functionality offers support for PPP, SSH, and VPN and can be used in conjunction with a Smart Card to experience "One-PIN-and-You're-In." The vpnd (VPN daemon) can be configured to send authentication requests (via RADIUS) to CRYPTO-Server and supports any off-the-shelf VPN client (Linux, OS X, Microsoft).

A true enterprise solution offering "High Availability," CRYPTO-Server 6.3 has no single point of failure - switching to a backup server in the event of system failure. Additionally, CRYPTO-Server 6.3 makes it easy for organizations to create a token-deployment database by reading, on a real-time basis from OpenLDAP, while the solution's CRYPTO-Deploy component makes it equally simple for administrators to instantly distribute software tokens from any computer, to any user. CRYPTO-Server's versatile software tokens can reside on a user's desktop, laptop, multi-function smart card, or Pocket PC.

CRYPTO-Web makes it easy to authorize and positively identify all users attempting to access Apache and IIS Websites, down to the page level, or groups of pages. With almost 75% (or more than 13 million) of the world's web servers running on Apache, CRYPTO-Server 6.3 represents a significant advance in authentication technology for the dominant player in the web medium.

CRYPTO-Web consists of 3 major components - an Apache module, the administrative application, and browser plug-ins. It uses domain level cookies, thereby enabling the use of CRYPTO-Web in a web farm and can support up to 255 servers. CRYPTOCard provides browser plug-ins for IE, Mozilla, FireFox, and Safari. This means that CRYPTOCard's Smart Card, USB, and Software tokens are fully integrated into the browser providing an ATM-like user experience (slide it in, and enter a PIN). The graphical administration component provides point-and-click administration and eliminates the requirement for the manual editing of files.

CRYPTO-Server 6.3's other components include CRYPTO-Kit, which provides developers with the custom application development tools to make it simple to integrate CRYPTOCard's technology with existing security applications/systems; CRYPTO-Deploy, to facilitate the deployment and activation of tokens; and CRYPTO-Migration; which provides RSA Migration functionality that enables organizations to switch from an alternative system (CRYPTOCard's tokens, with replaceable batteries, are deployed once and can be utilized indefinitely).

A five-user bundle (all-you-need-in-1-box - the full server software plus five tokens) is available for $499 (U.S. SRP), and will be shipping after LinuxWorld Canada. CRYPTOCard's products are available from Tech Data and other distributors, integrators, and resellers throughout the world. For more information on CRYPTO-Server 6.3 for Linux, LinuxWorld Canada attendees can also attend the official press launch in the media room (203C) of the Metro Toronto Convention Centre at 11:30 a.m. EST on Tuesday, April 19, or drop by the CRYPTOCard booth (925) at the conference. Alternatively, please visit www.cryptocard.com for additional background.

About CRYPTOCard Corporation

Established in 1989, CRYPTOCard provides cost-effective Secure Password Technology to leading enterprises worldwide in the government, technology, aerospace, financial, telecommunications, and healthcare sectors. Winner of the "Best of Show," award at Comdex and at Macworld 2004, CRYPTOCard positively authenticates a user's identity by coupling something in the user's possession (a smart card, hardware token, or software token), with something the user knows (their PIN), and provides centralized authentication for all physical and network access regardless of network infrastructure or user location. CRYPTOCard's partners include Cisco (Nasdaq: CSCO - News), Check Point (Nasdaq: CHKP - News), Citrix (Nasdaq: CTXS - News), Entrust (Nasdaq: ENTU - News), Oracle (Nasdaq: ORCL - News), Sun Microsystems (Nasdaq: SUNW - News), and Macromedia (Nasdaq: MACR - News). For additional information on CRYPTOCard, please visit www.cryptocard.com.

CRYPTOCard, CRYPTO-Server, CRYPTO-Admin, CRYPTO-Deploy, and CRYPTO-Logon, CRYPTO-VPN, CRYPTO-Web are trademarks of CRYPTOCard Corporation. Other products mentioned herein may be trademarks and/or registered trademarks of their respective owners.

--------------------------------------------------------------------------------
Contact:
Communication Strategies, Inc.
Michael O'Keeffe, 416-760-0100
mokeeffe@communicationstrategiesinc.net

--------------------------------------------------------------------------------
Source: CRYPTOCard