Velocity is Hirsch’s security management system that integrates access control, intrusion detection, badge printing and video surveillance. Its new capabilities enable it to acquire digital certificates from a certificate authority, expose Active Directory user and group lists for selection, encode the smart card with the trusted certificate, bind the card to the Active Directory user-ID, push the binding information to Active Directory, and do real-time checks of the certificate’s validity.

These new capabilities will enable users to log-on to Windows using strong authentication: two-factors (card and PIN) plus a real-time check of the card’s certificate status (i.e., valid versus revoked). Various configuration options are available to meet specific customer needs.

The Hirsch solution lets the physical security or human resources department issue a single smart card that can be used for both door and computer access. However, IT maintains its control. During card creation, the issuer must choose from the user and group lists that IT previously defined. IT need only ensure the user account exists in Active Directory. Alternatively, IT departments can choose to allow Velocity to push new users into Active Directory, such as in the case of a new employee. Additionally, IT assumes no card issuance or card management burden.

“For regulatory and liability reasons, organizations are eager to encrypt files and email, to digitally sign documents, and to log-on with more than a password,” explained Mark Allen, Hirsch vice president. “But the whole PKI and card management system topic can be daunting. And, frankly, politics play a role, sometimes causing issues between physical security and the IT department. With Velocity’s new capabilities, Hirsch addresses both those issues.”