{"id":1558,"date":"2017-02-08T10:36:14","date_gmt":"2017-02-08T14:36:14","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=1558"},"modified":"2017-02-08T10:36:14","modified_gmt":"2017-02-08T14:36:14","slug":"vmware-brings-derived-credentials-into-mobility-space","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/vmware-brings-derived-credentials-into-mobility-space\/","title":{"rendered":"VMWare Brings Derived Credentials to Mobility Space"},"content":{"rendered":"

\"killpasswords\"By Ashley Troutman and Jeff Edwards<\/em><\/p>\n

Passwords have been protecting us for generations, but lately they’ve become the target of a lot of criticism, and many now say they\u2019re on the way out. But with the password “dead”, how will we secure our information? Well, according to VMWare<\/a>, we\u2019ll do it with derived credentials.<\/p>\n

If you\u2019re not a fan of giving up your fingerprint for biometrics or dealing with multi-factor authentication, you may like the derived credentials concept. It\u2019s free from complex passwords and offers increased security for mobile devices, and it provides a stronger security posture for your environment, according to VMWare.<\/p>\n

A Google search of the term will take you to this page: NIST Special Publication (SP) 800-157<\/a>, which contains a rather intricate description. And lengthy, too; 33-pages to be exact.<\/p>\n

So VMWare attempted to break it down a bit more. They first highlighted that most entering an office building utilize a key card that identifies them and grants entry. And in a public sector environment, staff members normally use Personal Identity Verification (PIV) or Common Access Cards (CAC). The card is also used to gain access to computers. It typically includes several client certificates and one is normally meant for authenticating the network or back-end systems.<\/p>\n

When it comes to mobile devices, things get a bit more complex. Both iOS and Android users first implemented third-party smart card readers, which turned out to be costly. NSIT produced the guidelines for deriving PIV credentials for mobile to fix the issue, VMWare<\/a> reported. The credentials come from an end user’s proven identity and makes the need for a card reader obsolete.<\/p>\n

This could be vital for your business as derived credentials improve the authentication process. Help desk calls are reduced and workers are more productive without the frustrations related to lengthy passwords.<\/p>\n

\u201cWe need derived credentials to drive the complexity out of the end user\u2019s environment. We also need derived credentials to ensure that our data is safer and more secure,\u201d said VMWare.<\/p>\n

If you\u2019re interested and want to set up derived credentials with VMWare AirWatch, the vendor says the process is simple. Allow your IT department to configure the correct infrastructure components and then the end user will be able to complete set up in three steps, VMWare reports:<\/p>\n