Tesline-Service S.R.L.: Rohos Logon Key Server v2.7.6
Strengths: Easy to set up and deploy, allows for a user to login by plugging in the USB key to the machine.
Weaknesses: Pricey for a Windows authentication solution. No support yet for Windows 7.
Verdict: Delivers a token-based approach to Windows logon. Would like to see the offering do more for the price, such as hold/manage other certs, web-based credentials and more.
SummaryRohos Logon Key Server v2.7.6 allows users to access a Windows computer in an easy, fast and secure way using any USB key (USB flash drive). Rohos Logon Key sets up a standard USB flash drive with username and password so that they will be automatically entered when the user begins Windows.
The software is extremely easy to use. The application installs in minutes and is ready to manage the USB keys. Users have several options when using the logon key: They can replace the Windows GINA (graphical identification and authentication) with a Rohos welcome screen, have dual welcome screens, and use the Windows native MSGINA or Rohos Credential Provider (Win Vista only). We tested the latter.
If logging into an Active Directory, the Windows native option is recommended. Rohos Credential Provider appears on the Windows logon screen in the form of an icon of a USB key. Connect a configured USB drive, and the component will read from it a list of logon profiles (user credentials) for authorization in the system. If necessary, it will also request a PIN code from the USB drive (two-factor authentication). These profiles are then passed to the local security system for authentication. Users can set up what is to happen on the removal of the token, with options such as "lock screen to shut down PC." Admins can limit the access on the PC to a specific token device. They can also secure the USB token, which users would want to do so that everything on it is encrypted.
We found a few drawbacks. The first is there is no current support for Windows 7, only support for Win XP and Vista. Also, the password expiration/renewal function with USB key is not supported. There is no real reporting available and no ability to set up alerting. An admin can grab remote user log files and bring them back to the central server, but they are in raw text form.
Update, Jan. 26, 2011: In this review of Tesline-Service S.R.L.'s Rohos Logon Key Server v2.7.6 from the January 2011 issue, our reviewer Michael Lipinski said the product does not support Windows 7. This was based on his review of the support materials and documents provided by the company, as well as the compnay website, where there was no mention of Windows 7 support. However, after publication, the vendor informed us that the product does in fact support Windows 7 and now has updated the documentation on its website to properly indicate this.