eToken PRO Anywhere

Agenda  eToken PRO Anywhere Overview  Market background and target markets  Identifying the opportunity  Implementation and Pricing  Getting started with eToken PRO Anywhere

Introduction to eToken PRO Anywhere

The Highlights  What is eToken PRO Anywhere? The first portable, reader-less smartcard token that combines the strength of certificate-based strong authentication with the seamless simplicity of OTP What can you do with it? Securely access web-based online services and corporate networks (SSL VPN) from any computer with an Internet connection and a USB port Digital signature applications  What makes it an innovation in two-factor authentication? Offers complete user mobility (no need to pre-install desktop client software) Simple and easy to use end-user experience No maintenance: never expires and needs no battery replacement

eToken PRO Anywhere – What is it? An enhanced version of the bestselling eToken PRO Access from anywhere with no installation required for: Secure, certificate-based access to online consumer & enterprise services Access to web based applications and (OWA) Digital signing capabilities And.. When inserted into an eToken PKI Client environment, the device is a fully functional eToken PRO device Data encryption Password management Certificate-based security applications

Key Selling Points  Certificate ‐ based USB authenticator can be used on any Windows ‐ based computer with an Internet connection and a USB port  Plug and play: no end ‐ point software installation required  Offers full user mobility  Seamless, simple user experience  No maintenance: never expires and requires no battery replacement  Application rich: ideal for both online services, web-based secure network access (SSL VPN) and certificate ‐ based security applications ‐ from any computer  Reduces TCO by eliminating the cost of maintaining software clients on users’ desktops

Features  PKI certificate-based strong authentication ensures protection from phishing and man-in-the-middle attacks  On-board RSA 1024-bit and 2048-bit key generation, authentication & digital signing  Full PKCS#11 functionality  No battery required ensuring device durability and extended lifetime  In process for FIPS levels 2 & 3  Highly secure smartcard chip; Common Criteria certified  Hardened tamper-evident and water-resistant shell  Full compatibility with standard USB interface  Supports all SSL-based web sites configured for client authentication, including Microsoft IIS based web sites, Microsoft Outlook Web Access (OWA), and SSL VPN Gateways  Integrated secure logical and physical access option

Market Background

Market Drivers Business enablement through expansion of online Web services: More services moving online (banking, healthcare, higher education) Cybercrime posing more of a threat, more focused and more sophisticated – especially in a down economy Extension of enterprise services: More employees working from home More partners, suppliers and contractors need online access to partner portals, digital signature, remote access The need to address risk and compliance Customer/financial information (SOX, Basel II, FFIEC, PCI DSS) Credit card data HR records, healthcare information (HIPAA, HITECH) Mission ‐ critical applications (FIPS, CC)

B2C Market – The Challenge Uncontrolled environment Different kinds of users and levels of technical expertise IT personnel have no access to user computers Ability and aversion to install/update software Different operating systems User convenience is critical Process efficiency Deployment, distribution, provisioning and support mechanism to scores of users Consumers want security but… Are they willing to hassle with installation and support, and pay more? Consumers want security but… Are they willing to hassle with installation and support, and pay more?

Target Markets B2C and B2B organizations that are interested in providing customers, partners and employees with secure access from any computer with a USB port and Internet connection Online financial services Healthcare Higher education Online Services Partner portals and extranets Web-based SSL VPN Uncontrolled access points Digital signature Enterprise Market

Use Case: Online Financial Services  Bank provides eToken PRO Anywhere to customers  Customers can securely access confidential account information from any computer with an Internet connection and USB port  Customers can use digital signing to carry out online transactions  Key Benefits:  Bank can reduce “brick and mortar” costs by moving more customers to online banking  Bank customers can carry out transactions with confidence without having to physically go to the bank  Simple and easy for customers – no software install required Education Health Care eCommerce Finance

Use Case: The Enterprise Story  Employees on the road or working from home require access to web-based enterprise services  eToken PRO Anywhere offers:  Remote access to network, , company portals  PKI functionality when PKI Client is present  Combined physical and logical access when in the office (RFID option)  Key Benefits:  A more productive workforce  Better support for suppliers, contractors and partners  Offers secure access from any computer without the need for software installation, with the addition of full in-perimeter security in the office

Use Case: The Enterprise Story  Partners or contractors who need access to web-based enterprise services  eToken PRO Anywhere offers:  Remote access to partner portals  Digital signature  Key Benefits:  Better support for suppliers, contractors and partners  Secure access from any computer without the need for software installation

Implementation and Pricing

Implementing eToken PRO Anywhere What you need:  eToken PRO Anywhere tokens  TMS eToken PKI client (1 license for the server only) The process (Admin side)  Administrator installs TMS on a dedicated server, and then installs the eToken PRO Anywhere configuration tool  Administrator creates the eToken Anywhere application folder on a host web server  Administrator configures the TMS Anywhere connector for enrollment  Using TMS, administrator enrolls eToken PRO Anywhere tokens for the end users

How It Works for the End User 1.User inserts authenticator into any machine running Win2K and up 2.eToken PRO Anywhere launcher loads 3.Web browser opens 4.User enters authenticator password 5.User securely accesses website

Managing the eToken PRO Anywhere  eToken PRO Anywhere must be used with eToken TMS 5.0  When used in regular eToken PRO mode, needs eToken PKI Client version on client computers What does TMS Offer?  Reduces IT overhead  Streamlines and centralizes token operations for IT administrators  Simplifies the end user experience by offering Web-based self-service, help desk, and administration tools  Scalability  Organizations can easily expand their authentication solutions  Allows mix and match with any other eToken authenticator Why is TMS Required?  Based on product definition decision relating to the focus that the BU is placing on software sales.

Getting Started with eToken PRO Anywhere: Starter Packs  All-in-One packages that include everything needed to set up an eToken PRO Anywhere Solution, at attractive starter pack prices  eToken PRO Anywhere authenticators  TMS  PKI Client  Two versions available  eToken PRO Anywhere “Online Access” Solution Starter Pack  eToken PRO Anywhere “Enterprise Access” Solution Starter Pack

eToken PRO Anywhere demo include: A preconfigured eToken PRO Anywhere demo with authenticator Updated “Five Easy Steps” including default password and work-arounds for common problems Getting Started with eToken PRO Anywhere: eToken PRO Anywhere Demo

THANK YOU