1. DAS/BEST ITSecurity Division

2. RSA SecurID Software Tokens: Make strong authentication a convenient part of doing business. Deploy RSA software tokens on mobile devices—smartphones, tablets, and PCs— and transform them into intelligent security tokens. SecurID Software Tokens use the same time-based algorithm used in RSA SecurID Hardware Tokens.

3. The advantage of the Software Token seeds are: Extend term from 3yrs to 5yrs Administration overhead No travel required to obtain the software token Necessary billing paperwork can be managed electronically Reduced chance of token loss Ease of reassigning, no need to retrieve the hardware Requests are managed the same way as hardware tokens. Billing Software tokens are just a few cents more than hardware tokens, therefore billing remains the same. Note: billing begins the day after a token is assigned

4. Platform Flexibility SecurID Software Tokens support a variety of the most popular and widely deployed mobile platforms. Android iOS Microsoft Windows

5. Strong two-factor authentication to protected services Application available for download through Google Play (Android Market) Support for QR Code, Dynamic Seed Provisioning (CT-KIP), and file-based provisioning Support for up to 10 RSA SecurID tokens per device Support for copying the tokencode/passcode Android Features

6. Strong two-factor authentication to protected services App available for download through the Apple App Store Support for up to 10 software tokens per device Token provisioning from QR Code (for iOS 7 or higher), URL link, or file attachment Token import log for troubleshooting Redesigned UI iOS Features

7. Strong two-factor authentication to protected network resources Software token automation for integration with available RSA SecurID Partner applications Silent installation and silent upgrade Multiple token provisioning options including Dynamic Seed Provisioning (CT-KIP) Web plug-in for fast access to protected web sites with Microsoft Internet Explorer Interoperability with Windows screen readers for visually impaired users Microsoft Windows Features

8. Strong two-factor authentication to protected network resources Similar functionality and end-user experience to the Microsoft Windows version to simplify administration of mixed Windows and Mac OS X environments Multiple token provisioning options including Dynamic Seed Provisioning (CT-KIP) Native 64-bit application for integration support with 64-bit partner applications where required Mac OS X Features

9. Records and Auditing Only VPN liaisons for each agency are authorized to request remote access to their Agencies data. Accurate records must be maintained by the liaisons to account for access to Agency data. Software token activation codes will be valid for 72 hours from the point of assignment. Software token seeds will be disabled after 5 days if the signed SDP-6 is not returned to the ITSecurity Division. All forms should be returned to BEST-DL VPN Admins

10. Additional documentation will be available on the ITSecurity webpage when soft tokens are in production. Contact Information DAS/BEST ITSecurity Division David Geick, Director – David.Geick@ct.govDavid.Geick@ct.gov Sheri DeVaux, Manager – Sheri.DeVaux@ct.govSheri.DeVaux@ct.gov RSA Administrators BEST-DL VPN Admins DAS/BEST ITSecurity Division