Government ID, Smart Cards, Identification and Authentication

DHS taps Entrust, XTec to deploy PKI, smart card login

Tuesday, November 17, 2009

Entrust Inc. will provide the unified security infrastructure for the U.S. Department of Homeland Security. This agreement helps DHS enable cost-savings, meet HSPD-12 requirements, encrypt communications and data, and deploy secure credentials for both physical and logical access.

Facilitated by partner XTec Inc., who is the HSPD-12 solution provider for DHS, the Entrust deployment will provide PKI services and digital certificates for all DHS components and their employees. The two-year implementation will leverage Entrust’s PKI architecture, Entrust Authority, as well as Entrust Entelligence Security Provider and XTec’s AuthentX platform for the management and secure distribution of the agency’s internal digital certificates. These certificates will provide DHS proven smart card login, network authentication, as well as encryption for e-mail and desktop environments.


Entrust’s PKI solution has been implemented to perform security tasks in various U.S. federal agencies, including the U.S. Department of State for e-passports and the shared service provider PKI for the U.S. Department of Treasury. Entrust’s hosted PKI service is also identified by the U.S. General Services Administration as an approved shared service provider for use within federal environments.

Additional state and federal PKI deployments include the State of Illinois, State of Virginia, the Departments of Energy and Justice, NASA, the Government Printing Office, U.S. Department of Labor, U.S. Patent and Trademark Office and the Federal Bureau of Investigation.

XTec provides the experience to help federal agencies deploy solutions to comply with HSPD-12 and PIV requirements, as defined in FIPS 201 and related NIST standards. The specific solution, XTec’s AuthentX Identity Management System, includes components for an HSPD-12 PIV II solution. [end] 

The U.S. General Services Administration has awarded Entrust Inc. a four-year, $4.5 million contract to continue providing hosted PKI services and digital certificates as the security infrastructure for HSPD-12 initiatives. An incumbent in the re-compete proposal, Entrust has provided managed PKI solutions and services for the GSA’s credentialing program since 2007.

read more »

SCHUFA, a German credit reporting agency, has issued more than 1 million grid cards from Entrust for multi-factor authentication to its consumer portal. SCHUFA and its customers rely on the Entrust IdentityGuard authentication platform and Entrust’s grid cards.

read more »

Tools4ever has released the latest version of its single sign-on solution, E-SSOM, with new features including support for two-factor authentication and integration with access card systems.

read more »

A variant of malware called Sykipot is circulating that purportedly enables it to hijack U.S. Defense Department Common Access Cards and Windows smart cards, according to Alien Vault Labs. This variant, which appears to have been put together in March 2011, has been seen in dozens of attack samples from the past year.

read more »

Entrust Inc. has made enhancements to its Entrust Discovery digital certificate product by expanding search capabilities for digital certificates residing within Microsoft’s Cryptographic APIs and adding more than 25 basic or custom policy field alerts to ease certificate management.

read more »

Authentication and access provider DigitalPersona released the results of a survey that found more than half of retailers rely on passwords for point-of-sale system login in, even though they also have great concerns over passwords being shared and misused.

read more »