Review: Vasco Data Security Digipass CertiID

Digipass CertiID is a middleware solution to provide user applications access to cryptographic operations based on hardware tokens. It provides three different middleware modules that allow third-party applications to use cryptographic tokens: Vasco CertiID Smart Card Crypto Provider for cryptographic support for Microsoft and other CryptoAPI-aware products,Vasco CertiID Card Module for cryptographic support based on Cryptography API - Next Generation (CNG), and Vasco CertiID PKCS#11 library for cryptographic support for PKCS#11 v2.2-aware products.

We tested the CertiID software with standard smart cards and the 905 USB Card Reader. Being a desktop application, we loaded the application directly on our XP workstation. We were also provided a Digipass Key 1 token for testing. Digipass Key 1 is an ultraportable solution for strong authentication, secure access and safe transactions. We liked this option as the USB interface eliminates the need to install a reader at the client side. The Digipass Key 1 offers both a USB interface for logical access control and a contactless interface for physical access control.

This is a desktop solution that has tools for enterprise deployments. Those tools include deployment via Microsoft Image Files (.msi), integrated diagnostic tools for the use of help desk staff, an auto-update mechanism allowing administrators to automatically install Digipass CertiID updates and guarantee that the installed base is maintained and up-to-date. The product also supports Windows Certification Authority (CA), as well as Entrust CA. It will support any CA based on X.509 v3 certificates.

As a desktop app, we were very pleased with its capabilities to manage our tokens/smartcards. It was very easy to provision and reset the tokens and register certificates. We found the reporting and logging functions to be light. Digipass did, however, provide nice troubleshooting and diagnostic tools.

Eight hours a day/five days a week phone and email support is included for the first year. Additional support offerings are available for a fee. The documentation was stellar.

For: Full-featured desktop solution.

Against: Price, centralised management, reporting and logging.

Verdict: Good solution for integrated access control, endpoint credential and certificate management.