1. DOE Challenges How are Labs responding Security – Full disk encryption – Authentication – Threat management Directory services Energy conservation mandates Desktop management

2. Secure Foundation Security - Full Disk Encryption Security - Full Disk Encryption

3. Knowing the Players and their Products PointSec PC Mac Edition SecureDoc for Mac OS Whole Disk Encryption Full Disk Encryption Players - Software

4. Knowing the Players and their Products Seagate Momentus 5400 SecureDoc for Mac OS Full Disk Encryption Players - Hardware

5. Secure Foundation Security - Authentication Authentication

6. Smart cards 123 456 789 012 345 Keychains Smart Cards as Keychains Integrating complex devices into OS X Credential System

7. Pre-installed Smart Card Support /System/Library/Security/tokend/ “CAC” US Government (CAC, GSC-IS) “BELPIC” Belgian Personal ID Card “JPKI” Japanese PKI Card “PIV” *New in 10.5 US Government “Personal Identity Verification”

8. Pre-installed Smart Card Reader Support /usr/libexec/SmartCardServices/drivers/ “CCID” USB Class Readers ■ Chip Card Interface Device USB Readers ■ Athena, CRYPTOCard, GemPlus, SCM PC Card Readers ■ CRYPTOCard, SCM, OMNIKey PCMCI A

9. Secure Foundation Security - Threat Management Security - Threat Management

10. 123 456 789 012 345 Security Threat Management Shawn Geddis Enterprise Security Consulting Engineer MacOS X Security Tuesday, 11:45am Carolina Ballroom Apple Booth on Tuesday

11. Secure Foundation DirectoryServicesDirectoryServices

12. Directory Services Active Directory Possible solutions Active directory plug-in with MacOS X Basic functionality (name, password, home directory, UID, GID) Open Directory with MacOS X Server for MCX settings Third party solutions ADmit Mac by Thursby Extend AD schema

13. Secure Foundation EnergyConservationEnergyConservation

14. EPEAT Gold Why is it important? As of January 15, 2009, all Federal agencies must purchase 95% or higher EPEAT registered products in relevant product categories www.epeat.net

15. EPEAT Gold What is it? 23 Required and 28 Optional Criteria Carbon Footprint Energy Star 4.0 for energy usage Product design, packaging design, warranty extension, end of life Gold certification means product meets all required criteria PLUS at least 75% of optional criteria APPLE PRODUCTS ARE EPEAT GOLD CERTIFIED

16. EPEAT Gold What is it? www.epeat.net

17. EPEAT Gold Apple Energy Savings www.apple.com/environment/resources/calculator.html

18. Secure Foundation DesktopManagementDesktopManagement

19. Desktop Management What’s out there? Apple Remote Desktop (ARD) Third party solutions – Casper, LANrev, LANdesk Customer built solutions – PNL