updated 06:10 pm EDT, Fri May 29, 2009
ADmitMac w/PIV support
Thursby Software Systems has expanded its ADmitMac product line with a new variant geared specifically for use with personal identity verification (PIV) cards. The software is designed to ensure that server networks remain secure, while allowing administrators to manage individual users. It also includes Thursby's SMB and CIFS implementation for bidirectional file and printer sharing with Microsoft networks. ADmitMac for PIV adds the ability for Microsoft Entourage 2004 users to access e-mail using their PIV card instead of passwords.
When a PIV card is inserted into a Mac, ADmitMac changes the login screen and asks for the user's PIN authorization code. The software not only checks the PIN against the PIV card, but also verifies the card itself to ensure its privileges have not been revoked. The software also obtains authorized Kerberos certificates to lock the computer once the PIV cards are removed.
ADmitMac allows users running Mac OS X 10.4 Tiger or Mac OS X 10.5 Leopard to participate in Microsoft networks, with access to the directory services provided by Active Directory, NT, and Apple's Workgroup Manager. As a result, administrators can manage their domain users in a consistent way without regard for what kind of operating system they use. In addition, ADmitMac allows Mac access based on domain credentials and provides support for local or network home folders.
ADmitMac is designed for multi-user or multi-computer scenarios with administrator-defined network security. Domains are configured using Microsoft's Highly Secure (HISEC) security templates, with automatic integration with Kerberos. The necessary security keys are obtained from the domain and mutual authentication requires the server to verify its identity. ADmitMac also works with older NT directory services. All communication with domain controllers is performed using SMB/CIFS protocols.
The ADmitMac enterprise version provides two additional features including a deployment utility to allow simplified deployment to a group of Macs, and an AD commander which allows administrators to manage Active Directory settings.
The software is available from the Thursby online store for $150.