Feeds

SecurID takes backseat in Windows Vista

Death of passwords postponed

Internet Security Threat Report 2014

It was cheered, specifically by employees of RSA Security, as the means to provide secure login to PCs running Windows Vista, finally dispensing with passwords and helping lock down enterprise networks.

Two years later, though, Microsoft has abandoned plans to provide native support for RSA's SecureID token-based authentication system in the delayed operating system, despite having worked on integration with RSA.

A Microsoft spokesman told The Register that companies like RSA must now write so-called credential providers that talk to Windows Vista and allow their security tokens and authentication technologies to work with the operating system.

"Most customers told Microsoft they do not view one-time passwords as strategic and are looking long term to smart cards as their preferred strong authentication mechanism," the spokesman said.

Microsoft was speaking after RSA chief executive Art Coviello was reported to have revealed Microsoft had devised its own architecture for third parties to use rather than providing native support for SecurID.

The Microsoft/RSA SecureID alliance was announced at the RSA Conference in 2004 with enthusiastic backing from Microsoft. The vision was to provide users with two-factor authentication access to PCs and to finally replace static passwords - the death of which Gates has been predicting for some time.

Gates, then a relative newbie to RSA events, brandished an RSA key fob on stage at the 2004 show in San Francisco, California, to enthusiastic applause from RSA employees. Microsoft's head of security Mike Nash, meanwhile, said that SecurID would allow customers to "more positively identify users before giving them access to systems and corporate resources."

RSA and SecurID, though, appear to have lost their favored status. Instead, RSA must now join other security providers to develop credential providers, which plug into the Windows Vista LogonUI. Coviello blamed problems Microsoft has had delivering Windows Vista, saying native support for SecurID would appear in later editions of the operating system. ®

Intelligent flash storage arrays

More from The Register

next story
Azure TITSUP caused by INFINITE LOOP
Fat fingered geo-block kept Aussies in the dark
NASA launches new climate model at SC14
75 days of supercomputing later ...
Yahoo! blames! MONSTER! email! OUTAGE! on! CUT! CABLE! bungle!
Weekend woe for BT as telco struggles to restore service
You think the CLOUD's insecure? It's BETTER than UK.GOV's DATA CENTRES
We don't even know where some of them ARE – Maude
DEATH by COMMENTS: WordPress XSS vuln is BIGGEST for YEARS
Trio of XSS turns attackers into admins
Cloud unicorns are extinct so DiData cloud mess was YOUR fault
Applications need to be built to handle TITSUP incidents
BOFH: WHERE did this 'fax-enabled' printer UPGRADE come from?
Don't worry about that cable, it's part of the config
Astro-boffins start opening universe simulation data
Got a supercomputer? Want to simulate a universe? Here you go
prev story

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
10 threats to successful enterprise endpoint backup
10 threats to a successful backup including issues with BYOD, slow backups and ineffective security.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Beginner's guide to SSL certificates
De-mystify the technology involved and give you the information you need to make the best decision when considering your online security options.