2. Smart Card Deployment David Gautrey IT Manager – Microsoft New Zealaand Microsoft Corporation

3. The RAS Security Threat Unpatched vulnerabilities and weak configurations expose valid network credentials Home users’ machines are a frequent hacker target Remote network access secured only by Passwords Unauthorized activity with valid credentials difficult to detect/prevent Unmanaged and infected remote devices put corporate resources at risk Unmanaged and infected remote devices put corporate resources at risk Viruses, Trojan horse applications, worms Viruses, Trojan horse applications, worms Always-on, broadband Internet access heightens exposure Always-on, broadband Internet access heightens exposure Malicious Users Malicious Software

4. Tokyo Dublin Singapore 95,000 e-mail server accounts RedmondTukwila Charlotte 3M+ e-mail messages per day internally 99.99% availability 89,000 end users 89 countries 300,000+ PCs and devices Single Instance SAP (1.5Tb Db) Silicon Valley 7,000,000 remote connections/month Johannesburg Microsoft IT Data

5. Secure Authentication Alternatives Smart Cards Biometrics HW Tokens Cost Features Mobility Reliability Support

6. Secure RAS Solution Components Smart Card RFID Badge 32k chip Windows for Smart cards Hardware PC or Laptop Smart card reader (PCMICA, USB, Serial Client Software Cryptographic Service Provider (CSP) Windows Resource Manager Reader drivers Connection Manager Server Software Windows Active Directory Windows Certificate Server Card management tools RAS Services Smart Card

7. Deployment Card creation process Pilots Initial card distribution process Delegated issuance model User install and setup Training and support issues Ongoing maintenance and operations

8. Challenges Mobile devices, Macintosh, and UNIX platforms not compatible with smart card EAP/TLS authentication Smart card solution component selection Performance varies based on combination of cards, OS, and readers Smart card distribution process was resource intensive Card System Extensibility Managing policy and client groups was complex Client software version control

9. Lessons Learned Deployment PlanningPKI Maintaining security Exception management Pilots Physical distribution Scripted installation Communicate to users

10. Secure RAS Administration Card Issuance Certificate approvals DistributionSupport Policy and Exception Mgmt Card Mgmt Delegates Users Submits Certificate requests in behalf of user Distribution PIN resets Certificate renewal

11. Future Plans Smart card industry still maturing Improved interoperability with various business systems Likely industry consolidation in the next 12-24 months Improved product standards, including plug-and-play compatibility and greater integration with Windows platform Securing accounts with elevated privileges Portable digital signatures Expanding applications support Signing stock grants, securing financial/HR data, signing source code, etc. Increased use of remote data access technologies – OWA, OMA, etc. PASSWORDS

12. Summary More focus on security needs worldwide Increasing security threats to corporate network assets Smart Card technology provides two-factor authentication Leveraged existing infrastructure Extensible solution for internal development Microsoft has mitigated remote access security risk through the deployment of smart cards and Connection Manager

13. For More Information Additional content on Microsoft IT deployments and best practices can be found on http://www.microsoft.com http://www.microsoft.com Microsoft TechNet http://www.microsoft.com/technet/itshowcase http://www.microsoft.com/technet/itshowcase Microsoft Case Study Resources http://www.microsoft.com/resources/casestudie s http://www.microsoft.com/resources/casestudie s http://www.microsoft.com/resources/casestudie s E-mail IT Showcase showcase@microsoft.com showcase@microsoft.com

14. © 2003-2004 Microsoft Corporation. All rights reserved. This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.