Subscribe to the Free Print Edition!
Celebrating 25 Years

GCN Home > 08/04/08 issue

FDCC model branches out

By Wyatt Kash

THE AIR FORCE started taking delivery in July on the first of 150,000 new PCs the service ordered through its latest Enterprise Buy program. Many of those computers won’t look much different than the machines they’re replacing, aside from desktop PCs that sport new 24-inch MPC monitors.

However, the new desktop and laptop PCs being delivered by Dell, Hewlett-Packard and Emtec will be distinct in one regard: They’ll be the first to come equipped with their Windows Vista operating systems, including Internet Explorer 7, preset to meet Federal Desktop Core Configuration (FDCC) 2.1 standards.

The new PCs reflect the latest efforts by the Air Force — and the federal government more broadly — to standardize the security configurations not only for desktop PCs but also for a broadening array of devices destined for government use.

Projects are now under way to standardize configurations for servers, printers, cell phones and Apple Macs, said Ken Heitkamp, the Air Force’s associate director of life cycle management and director of the service’s IT Commodity Council (ITCC).

The FDCC grew out of the ITCC’s initial efforts with Microsoft in 2006 to test and develop a standard software configuration. This was done in collaboration with the National Institute of Standards and Technology, the National Security Agency, the Defense Information Systems Agency and other agencies.

The desktop standard hasn’t been free of controversy. A March 20, 2007, Office of Management and Budget memo that required agencies to implement the FDCC’s Windows XP and Vista security standards by Feb. 1, 2008, creating a new layer of work requirements.

Nevertheless, the FDCC initiative has won praise for forcing the software industry to pay greater attention to the default settings of its products — and as a way to reduce security vulnerabilities.

The Air Force has already implemented the XP FDCC version on more than 500,000 PCs, Heitkamp said. And all Windows-based PCs on Air Force networks will need to use the FDCC version of Vista by Dec. 31, 2009.

Server setups

It was only a matter of time before the Air Force ITCC began applying its standardization model to servers. The service is testing configurations for Microsoft Server 2008, based on similar work completed for Microsoft Server 2003 seven months ago, said Michael Harper, Microsoft Services Director.

“We took that guidance to create a base configuration for Server 2008,” Harper said, and the company will develop configurations for “roles placed on top of the base configuration.”

More news on related topics: Communications / Networks, IT Security, Defense IT, IT Management