Aladdin eToken TMS
July 01, 2007
- Ease of Use:
- Value for Money:
- Overall Rating:
- Strengths: Easy to install, but plan to spend some time getting familiar with the interface.
- Weaknesses: Support is mission in key areas, and much like Linux leaves the client on its own to figure out options.
- Verdict: This is a solid product, but can be confusing; lack of support can make admins feel like they are on an island.
The Aladdin eToken TMS (Token Management System) is software-based and includes the ability to use two-factor authentication, as well as digital signature using the Aladdin tokens. The TMS included features for self service for user resets, centralized reporting and logging, and centralized management of users and devices. The TMS offering is built on Active Directory and installs easily on Server 2003. The tokens for Aladdin can be used for email encryption, smart card authentication on the client or for Secure Sockets Layer (SSL) using client-side certificates.
The installation of TMS was simple and the product installed on Server 2003 without any complications. The software installed in three pieces: the public key infrastructure (PKI) client, the TMS server and the one-time password authentication server. All components installed like a breeze and require little or no guidance. Once the software was installed, navigating the software to unlock tokens was a bit maddening. It took over 30 minutes to figure out the correct path. Once the tokens were unlocked, they were easily distributed to the clients, and like most standalone options, the e-tokens also included secure USB storage on some devices. Also, like most two-factor authentication systems, TMS can be used for reduced sign-on (RSO), or be programmed into ID management systems for a single-sign-on (SSO) option.
Documentation is included electronically in the form of PDF files. The documentation is easy to follow and the layout is logical and necessary for most administrators. The documentation was indexed and searchable in the documents.
Support of the Aladdin system is limited and is widely related to initial install. The website offers little in the way of a knowledge base or FAQs about the product. All that is available through the site are electronic copies of the documentation (which are already included). However, a number is listed to contact the company on the support site.
The pricing for the TMS offering was at the high end of the price spectrum starting at $60 per user in low quantities for the eToken PRO + PKI Client 4.0. Included features make the Aladdin system a strong performer and a good overall offering.
SC Magazine Articles
- PCI DSS version 3.2 release extends multifactor authentication requirement
- Over 7M Minecraft mobile credentials exposed after Lifeboat data breach
- New site on dark web offering one-stop ransom services
- Pwnedlist vulnerability exposed 866M accounts
- Turkish fascists claim responsibility for Qatar bank data breach
- DōTERRA breach exposes customer info; including SS, DOB, and addresses
- Federal court bucks trend, rules general liability insurance covers data breach
- The anatomy of a spearphishing scam, or how to steal $100M with a fake email
- Report: Ransomware feeds off poor endpoint security
- Pros examine Mossack Fonseca breach: WordPress plugin, Drupal likely suspects