Federal Government Solutions
Centrify enables more than 60 defense and other federal agencies to secure and audit sensitive UNIX and Linux systems and lockdown Mac OS workstations by leveraging their existing Active Directory infrastructure
Just as important, because Centrify leverages existing Active Directory infrastructure to centrally secure and audit non-Windows systems and applications, organizations can actually simplify their IT infrastructure and processes. With a single point of administration for accounts, access controls, privileges and policy for non-Windows systems and workstations, IT managers can implement security levels appropriate to their individual organization's needs and more easily accomplish the reporting and auditing tasks required for certification and accreditation of their processes.
Learn More
Overview of Centrify Solutions for Federal Agencies
The following table summarizes some of the federal regulations and best-practice initiatives that Centrify can help you address, with links to additional information. Contact the Centrify federal team to schedule a time to discuss your own needs.
| Regulation/Initiative | Centrify's Solution | Learn More |
| Federal Information Security Management Act (FISMA) | Centrify's access control, privilege management and auditing solutions help federal agencies address key FISMA provisions as recommended in NIST SP 800-53, including sections AC (Access Control), AU (Audit and Accountability), CM (Configuration Management) and IA (Identification and Authentication). | |
| JITC-Approved Two-Factor (Smart Card) Authentication for Mac OS X | Homeland Security Presidential Directive 12 (HSPD-12) has driven the adoption of smart cards as the agreed-upon method for implementing more secure authentication to information systems. Centrify's support for the DoD's Common Access Card (CAC) standard, which is certified by the Joint Interoperability Test Command (JITC), brings Mac OS X systems into compliance with HSPD-12. | |
| National Industrial Security Program Operating Manual (NISPOM / DoD 5220.22-M) Chapter 8 | The NISPOM defines procedures that government contractors must adopt to access classified information. Section 8-303 in particular requires that users access systems using accounts that uniquely identify them and that these identities be tied to auditable actions. Centrify DirectControl and DirectAudit work together to establish this accountability. | |
| Federal Information Processing Standard FIPS 140-2 Validated (Certificate #1604) | FIPS 140-2 documents the requirements for cryptographic modules included in third-party software and hardware that federal agencies and regulated industries use for handling sensitive but non-classified information. Centrify is validated FIPS 140-2 Level 1. | |
| Federal Desktop Core Configuration (FDCC) | Although Mac OS X systems are not included in the FDCC, agencies can use Centrify's desktop lockdown capabilities to proactively develop FDCC-like security configurations for their Mac systems. | |
| DoD Information Assurance Certification and Accreditation Process (DIACAP) | Centrify solutions for role-based privilege management will be useful in the accreditation process, particularly requirements for authorizing the operation of DoD information systems. | |
|
Isolation of Sensitive Systems and Encryption of Data-in-Motion (IPv6 Adoption) |
The Office of Management and Budget (OMB) has mandated the adoption of IPv6 for, among other things, its ability to establish authenticated connections among systems and to encrypt data moving across IP networks. Centrify DirectSecure provides a streamlined and easy-to-deploy solution that enables server isolation and encryption of data-in-motion for UNIX and Linux systems. | |
|
Department of Defense Information Technology Security Certification and Accreditation Process (DITSCAP) National Information Assurance Certification and Accreditation Process (NIACAP) |
DITSCAP (for DoD agencies) and NIACAP (for civilian agencies) prescribe a set of standards and processes for certifying and accrediting an information system's information assurance (IA) and security posture. NIST SP 800-53's guidance for FISMA is also generally used to formulate the specifics of an information system's security posture for the purposes of gaining DITSCAP, NIACAP and similar certification. Therefore, systems using the Centrify Suite for FISMA compliance will find that our auditing and reporting features also bolster these certification activities as well. | |
| Section 508 Compliance | Centrify has conducted a Section 1194.21 voluntary self-assessment to describe how the Centrify Suite's Administrator Console, an MMC snap-in, addresses Section 508 standards for making information technology accessible to people with disabilities. |
Just a Few of Our More Than 60 Federal Customers
Centrify has relationships with virtually all the major defense and civilian agencies. Here is a sample. Contact the Centrify federal team to learn what we have done for your agencies or related agencies.
List of Federal Resellers
You may work with the following partners when purchasing Centrify solutions. Or contact the Centrify federal team if you have other purchasing requirements.
Columbia, MD-
Agency Consulting Group
Agency Consulting Group (ACG), a service-disabled, veteran-owned small business, is a growing IT support and integration provider supporting our country’s defense industry and Federal agencies. We support today’s in-demand technologies with an emphasis on Solaris and Linux environments. ACG has designed, tested, productized, implemented and sustained large-scale virtualized computing environments supporting customer bases in the thousands. ACG has deployed technologies allowing for the secure remote access of heterogeneous applications sets (UNIX, Linux, Windows, mainframe, and web-based), providing our customers with a single presentation to access all application types. ACG designs and maintains our customer’s mission systems and applications by providing certified professionals experienced in large and complex infrastructures.
McLean, VA-
ImmixGroup
ImmixGroup provides federal, state and local government agencies with reliable access to commercial technology products and services from companies such as IBM, Oracle, EMC, McAfee and more. Since 1997, we have helped hundreds of software and hardware manufacturers do business with the public sector while ensuring they comply with your unique and complex requirements. Our ISO 9001:2008 registered business processes and years of experience focused exclusively on the public sector ensure you can easily source the technology solutions you want through the contract vehicles you prefer.
GSA Schedule Number: GS-35F-0511T. 
Ashburn, VA-
Intelligent Decisions
Headquartered in Ashburn, VA, Intelligent Decisions (ID), a premier global systems integrator, provides a broad range of innovative, IT professional services, software, hardware and manufacturing solutions to the Federal government. Ranked on the VARBusiness 500, Inc. 5000, CRN's Fast Growth 100 and Washingtonian's Best Places to Work, ID offers best-value pricing and helps clients meet their strategic goals and mission objectives.
Chantilly, VA-
Iron Bow Technologies
Iron Bow Technologies forwards a history of over 20 years as a leading full-lifecycle IT solutions provider to government and industry. Leveraging strong technology through a collaborative engagement model, the company designs and builds information security, data center, collaboration, network and client computing solutions that are on-target with customer missions.
Dulles, VA-
Technica
Technica is dedicated to providing high-end technical expertise, experienced program management and reliable IT solutions to Federal Government customers. Priding themselves on being innovative problem solvers who strive to put their customers' needs first, Technica provides experienced, reliable engineers to identify the best possible solution to ensure the success of each client's mission.
Plano, TX-
vTech Solutions
vTech Solutions is a certified Federal Hub zone company specializes in advanced server and storage virtualization technologies that deliver immediate return on investment. Our highly experienced engineering staff will work with you to deliver a virtualization that is aligned to your business strategies resulting in lower operational costs, improve hardware utilization, and increase efficiency.
