Subscribe to the Free Print Edition!
Celebrating 25 Years

GCN Home > 01/21/08 issue

Uncommon smart-card control

GCN Lab Review: Raritan’s new KVM switch balances security and convenience with a CAC reader

By Michelle S. Haase, Contributing Writer

MAKERS OF INFORMATION technology equipment often walk a fine line between security and convenience. If you make a product extremely secure, users might not be willing to jump through the hoops required to use it. But if you make it too convenient, security suffers — something especially unacceptable in the federal government.

Raritan has struck an excellent balance with its new Paragon II Smart Card Reader Solution, an analog keyboard-video-mouse with an integrated smart-card reader. The reader supports the Defense Department’s Common Access Card and is the first smartcard reader for a KVM switch.

Homeland Security Presidential Directive 12 mandates that DOD use CACs for access to federally controlled computer systems and facilities. The department has several million CACs in circulation at a given time.

The analog format increases security by allowing Paragon II to remain completely off the network.

The reader provides the card data to the target server through the Paragon analog pathway.

The card reader authenticates users against a third-party external authentication platform before allowing access to servers, and the solution does not store or cache data on the card. It also requires new authentication from the card when switching from one server to another, although users may leave the card in the reader.

When used with personal identification numbers — the typical configuration — the solution meets the new federal requirement for two-factor authentication.

Video is another important component of KVM switches, given the increased use of graphics and video-intensive computer programs.

The problem with video is that its quality degrades as the distance between the computer and the switch increases.

The Paragon II system consists of a user station with an integrated smartcard reader from SCM Microsystems, one or more stackable switches and a Computer Interface Module for each connected server that requires smartcard or CAC authentication.

The switches are available in several models that allow different numbers of users and connected servers. We reviewed the P2- UMT832, which supports as many as eight users and 32 servers. The user station can be connected to stacked Paragon II switches and tiered switches. By stacking the switches, administrators can use Paragon II to manage thousands of servers.

More news on related topics: Communications / Networks, IT Security, Authentication / Identity Management, Hardware



GCN Popup