Aladdin eToken PRO
Strengths: Nice management solution, numerous features available to the user, attractive price points
Weaknesses: Didn't find any.
Verdict: Definitely one to consider for any enterprise strong authentication project. We give it our Best Buy rating
SummaryAladdin's eToken PRO is a strong and cost-effective two-factor authentication password management solution. It uses a PKI infrastructure to generate and store users' personal credentials, such as private keys, passwords and digital certificates. To authenticate, users must supply both their personal eToken device and eToken password, providing a critical added level of security to digital business resources.
We loaded Aladdin's management application, the Token Management Systems (TMS), on our test server. The server side did require a substantial amount of work to get all the operating system dependencies and Aladdin components loaded and configured for operation. There was an easy to use TMS Configuration Settings Wizard that walked us through the entire process of final configuration. Once loaded, the TMS provided a nice interface for token enrollment and lifecycle management.
User creation was easy as the TMS provided Microsoft Active Directory integration. The version we tested also had support for OpenLDAP and SQL databases for user management. There were nice options available for user self enrollment and password reset through a simple-to-use web browser interface.
Another user benefit was the Token Vitural capability, allowing a user to continue to work when they lose a token.
The TMS managed the entire line of hardware and software tokens supported by eToken PRO. The USB tokens we tested had the added capability to store keys in a secured encrypted area for things like email encryption or other applications requiring key exchange.
The reporting and auditing features were very strong and what we would expect from an enterprise solution.
There are numerous support options available for a fee. The supplied documentation and online resources were all very good.
This was a complete solution for enterprise strong authentication management. It possessed the server side features required for a large enterprise and the user side features necessary to make it easy to use and reduce overhead.