Press Release

Centrify Delivers Mac OS Smart Card Login to Active Directory for CAC, PIV and .NET Smart Cards

Centrify also adds capabilities to streamline installation for faster deployment and enable Finder lockdown for increased security

October 22, 2008

For More Information

Centrify Corporation, the leading provider of Microsoft Active Directory-based auditing, access control and identity management solutions for non-Microsoft platforms, today announced the release of Centrify DirectControl 4.2 for Mac OS X which adds smart card-based login to Active Directory for single sign-on to Windows-integrated services and applications. Centrify leverages the PKI infrastructure provided by Apple and works with both Common Access Cards (CAC) and Personal Identity Verification (PIV) cards as well as with other cards that support the Apple TokenD interface such as the .NET smart card from Gemalto, the world leader in digital security. With this capability, government agencies and other organizations can use smart cards for interactive login from the Mac to all services in the organization whose access is controlled from Active Directory, not just the local computer.

Centrify is committed to making it as easy to integrate and administer Macs with Active Directory as it is for Windows computers," said David McNeely, director of product management for Centrify. "By supporting smart card login to Active Directory, Centrify helps government agencies, education institutions and commercial organizations further secure their environment by centrally enforcing smartcard login policies for users of Mac systems."

"Integrating our Gemalto .NET smart card with Centrify's DirectControl is an important milestone because it enables Mac users to logon and authenticate to Microsoft networks with their corporate badges and tokens" said Jerome Denis, marketing director for Identity and Access Management at Gemalto. "By using Centrify's Group Policy-based lockdown capabilities for the Mac platform, organizations also can add further security controls without increasing administrative workload."

DirectControl effectively turns a UNIX, Linux or Mac system into an Active Directory client, enabling administrators to secure that system using the same authentication and Group Policy services currently deployed for their Windows systems. By adding smart card support to its Mac agent, Centrify enables customers to use Mac systems in high security environments complying with Homeland Security Presidential Directive (HSPD) 12 requiring secure and reliable identification of Federal employee and contractors using PIV cards.

DirectControl 4.2 for Mac OS X also adds increased security features that include allowing organizations to lock the Mac Finder. This is especially important in schools and universities that allow students to share Macs but don't want them to manipulate the system. Finder Lock is one of more than 200 Mac-specific Group Policies that Centrify has developed to help administer Macs from the same centralized administrative tools from which Windows computers are managed. Other policies added in this release include enforcement of a computer policy to require smart card login, a removal policy to either lock the screen or force a logout when the smart card is removed, and additional security controls.

With this release, Centrify DirectControl for Mac OS X also includes a streamlined installation that allows a one-click setup of the Mac in Active Directory. Centrify's workstation installer was specifically designed to enable administrators to deploy DirectControl on Macs and quickly join them to an Active Directory domain. In this way the users get prompt access to network services and administrators can quickly apply policies to the Macs.

Price and Availability

Centrify DirectControl for Mac OS X Smart Card edition is licensed for $90 for one copy and is available in Beta now and will be available within 90 days. CAC and PIV are supported on OS X 10.5.3 and higher.

About Centrify

Centrify's auditing, access control and identity management solutions centrally secure cross-platform systems, web applications, databases and enterprise applications using Microsoft Active Directory. Centrify is a founding member of the Enterprise Desktop Alliance, a consortium of software companies committed to making it easy to integrate Macs into the enterprise. More than 600 enterprise customers, including over 38% of the Fortune 50, have selected Centrify for its quick-to-deploy, easy-to-manage Active Directory-based cross-platform interoperability solutions. The Centrify Suite comprises DirectControl, DirectAuthorize and DirectAudit, and helps organizations improve IT efficiency, better comply with regulatory requirements, and move toward a more secure, connected infrastructure for their cross-platform computing environment. For more information about Centrify and its solutions, call +1 650-961-1100 or visit