ENTRUST IDENTITYGUARD™

VIRTUAL APPLIANCE
Two-Factor Authentication - Simple to Deploy,
Easy to Use

‘‘
It is a very powerful and
Attacks on the enterprise are becoming more frequent and easy-to-manage tool. We
sophisticated, and legacy identity and authentication approaches are
are able to customize
and implementation
an increasingly ineffective deterrent while also being cumbersome for

’’
is a breeze.
end users. Entrust Datacard helps Financial Institutions, Governments
- Rommel Luna, System Administrator,
and Enterprises alike move beyond passwords with solutions that are
The Wawanesa Mutual Insurance
seamless to deploy, easy to use, and affordable. Company

‘‘
I have worked with
Entrust Datacard and
THE ENTRUST IDENTITYGUARD VIRTUAL APPLIANCE their products for over
As mobile becomes the preferred way to access resources, Entrust Datacard offers
a decade. Entrust
a simple, secure way for employees to access workstations, networks and websites Datacard provides great
from any location. Our broad range of authentication solutions include mobile push products, great services,
notifications—one of the most secure and convenient authentication methods available. great consulting and
is very responsive

’’
Businesses today are being challenged to offer secure access to a broader array of
to client needs.
services and applications while guarding against growing threats. IT resources are
limited and the systems to support strong authentication continue to grow in scope - IT Professional, State & Local
and complexity. With outdated solutions that will not support evolving IT needs, Government
organizations must look towards flexible, strong authentication solutions that can

‘‘
be deployed quickly—without negatively impacting IT. I have used Entrust
Datacard now in two
The Entrust IdentityGuard Virtual Appliance provides an easy-to-deploy, turnkey
different organizations
authentication solution that enables your organization to gain efficiencies and cost
reductions. The Entrust IdentityGuard Virtual Appliance includes comprehensive
and feel it offers good
software, modules, utilities and tools that help staff spend less time on IT management value for the money, as
and more time focusing on revenue for their bottom-line. well as a very good
range of options for
second factor

’’
authentication.
- System Administrator, Medium
Enterprise Computer Software
Company

+1-888-690-2424
[email protected]
entrust.com/authentication
Entrust IdentityGuard™ Virtual Appliance
Two-Factor Authentication - Simple to Deploy, Easy to Use

ENTRUST IDENTITYGUARD™ VIRTUAL APPLIANCE BENEFITS:

Strong Authentication
Unlike solutions that appear attractive, yet underperform, our industry-leading
authentication platform supports a broad range of use cases and next generation
identities (such as mobile push authentication) which give you flexible authentication
methods that grow with your business needs.

Easy to Deploy
Provided as a turnkey solution, the Entrust IdentityGuard Virtual Appliance is a
premier, two factor authentication solution that includes the operating system,
database, and installation wizards that help ensure a simple installation that gets you
up and running quickly. Our out-of-the-box support for redundancy and disaster
recovery eliminates the need for IT to design and configure the system on their own –
ultimately providing optimal distribution to the business and securing the Enterprise.

Easy to Manage
User enrollment and management can be done with our Self Service Module, reducing
the burden on IT and calls to the help desk for requests such as password resets.

Easy to Use
With mobile push authentication, users can move away from outdated passwords and
hardware tokens while retaining the ability to authenticate easily with a simple click
of an “OK” button.
HOW ENTRUST IDENTITYGUARD™ VIRTUAL APPLIANCE WORKS
A Total Solution - SIMPLICITY AND SECURITY Entrust IdentityGuard™ Virtual Appliance
Entrust Datacard offers a Virtual Appliance that simplifies User Self‑Service
the deployment of Entrust IdentityGuard in organizations The Self-Service Module is an optional component that provides
of up to 20,000 users. value in many authentication and administration scenarios.

The Self-Service Module enables users to manage their

Entrust IdentityGuard Virtual Appliance Server
authenticators at any time without the assistance of a help desk.
The Entrust IdentityGuard Server is the core of the Entrust
IdentityGuard solution. It brings together policies for protecting
your online resources (computers, Web sites, and applications) ENTRUST SOLUTION
with users who need access to those resources.

VIRTUAL APPLIANCE
The Entrust IdentityGuard Virtual Appliance Server starts
with a hardened operating system, which means that non-
essential software and utilities have been removed to reduce
security vulnerabilities.

The Entrust IdentityGuard Virtual Appliance's Web-based

Authentication Management
product and configuration management interface simplifies Software Tools Database
installation, repository configuration, backup and restore
operations, updates, clustering, and disaster recovery.
B
The Entrust IdentityGuard Virtual Appliance installation offers:

šš A wide range of user authentication options

A
Hardened
by Entrust
šš Active Directory synchronization to simplify user enrollment High Assurance/
Disaster Recovery Operating System
and management Utilities
šš Optional integration with hardware security modules (HSM)
for enhanced secure storage of master keys
CUSTOMER PROVIDES
šš Integrations to support your existing systems

VIRTUALIZATION ENVIRONMENT
The Entrust IdentityGuard Virtual Appliance Server installer lets
you create a cluster of Entrust IdentityGuard servers (primary,
standby, and up to four replica servers) that provide redundancy
and failover capability.

The Entrust IdentityGuard Virtual Appliance Server installation

includes a single user database that offers redundancy through
streaming replication.
Entrust IdentityGuard™ Virtual Appliance
Two-Factor Authentication - Simple to Deploy, Easy to Use

USE CASES VPN / Web Access

Our authentication platform allows your enterprise to ensure
Cloud SSO (federation) secure employee access to your networks and websites.
The move to the cloud and broad adoption of enterprise apps
forces IT departments to view security outside traditional Windows Desktop Login
enterprise boundaries. Our authentication platform makes this Bring strong two factor authentication to windows desktop login
transition easy to manage — and incredibly secure. through mobile push authentication and fall back methods when
users are offline.
Mobile as the Computing Platform
Our Mobile Smart Credential capability acts as a virtual smart Customer Portals
card that resides on mobile devices. There's nothing for users Meet the needs of your users and create more frictionless
to carry or insert. There’s just secure, seamless access. experiences that move beyond traditional passwords without
compromising security.

Entrust IdentityGuard™ Virtual Appliance Specifications:

Entrust IdentityGuard Server Release 11.0 (patch 203998)

Entrust IdentityGuard Self-Service Module Release 11.0 (patch 203961)

Operating System Red Hat Enterprise Linux (RHEL) 6.7

Virtual Machine Requirements 1 CPU, 4GB memory

Database PostgreSQL® 9.4.4

Supported Virtualization applications VMWare Workstation™, VMware vSphere ESXi ,

Microsoft® Hyper-V®

Recommended max number of users Entrust IdentityGuard: 20,000

Smart Credential Authentication: 5,000

(due to increased storage requirements)

Supported authentication methods Biometric, External Grid Card, Token (hardware, software and
mobile), Knowledge-based, Mutual, Password, Person Verification
Number (PVN), OTP, Machine, Adaptive Authentication,
Temporary PIN, Vasco and Camera tokens (limited regions)

@EntrustDatacard /EntrustVideo /EntrustSecurity +entrust datacard-group

About Entrust Datacard Headquarters

Consumers, citizens and employees increasingly expect anywhere-anytime experiences — whether they Entrust Datacard
are making purchases, crossing borders, accessing e-gov services or logging onto corporate networks. 1187 Park Place
Entrust Datacard offers the trusted identity and secure transaction technologies that make those Shakopee, MN 55379
experiences reliable and secure. Solutions range from the physical world of financial cards, passports USA
and ID cards to the digital realm of authentication, certificates and secure communications. With more
than 2,000 Entrust Datacard colleagues around the world, and a network of strong global partners,
the company serves customers in 150 countries worldwide.

For more information about Entrust products and services, call 888-690-2424,
email [email protected] or visit www.entrust.com.

Entrust Datacard and Entrust are trademarks, registered trademarks and/or service marks of Entrust Datacard Corporation in the United States and/or other countries.
Names and logos on sample cards are fictitious. Any similarity to actual names, trademarks or tradenames is coincidental. ©2016 Entrust Datacard Corporation.
All rights reserved.
30138-1-0816