< Junos Pulse Release Notes >
© Juniper Networks, Inc.
4
Authentication Using Smart Cards
Junos Pulse 2.0 supports the authentication of users using smart cards. Administrators can deploy Junos Pulse for
remote user authentication using smart cards, as well as for managing PIN and password policy management. Junos
Pulse supports smart card authentication to a local Microsoft Windows computer as well as in RDP environments,
authenticating the user to a remote machine from a locally available smart card.
Smart card authentication is also made intuitive to remote users by indicating the smart card certificate in the user
interface prompts using a different icon from that used for locally installed certificates.
Junos Pulse 2.0 allows remote user authentication using smart cards to both the SA Series SSL VPN gateways, as
well as the IC Series UAC gateways.
Smart cards that have been tested on Junos Pulse 2.0 include (to date):
•
RSA SID800 USB tokens.
•
SafeNet iKey 1000/ 2032/4000/eToken-PRO USB tokens.
•
Gemalto .Net cards.
•
DoD (ActivIdentity) CAC cards.
Compatible with:
SA Series SSL VPN 7.1
IC Series UAC 4.1
MSI Installer
Junos Pulse 2.0 now supports a new, redesigned installer that uses the Microsoft Windows Installer (MSI)
technology. This allows for the seamless deployment of Junos Pulse by customers through software management
systems (SMS) that are widely used for deploying MSI based applications.
The new MSI installer provides several key benefits to customers, including:
•
Seamless Rollback:
As the installation proceeds, a list of all actions is maintained and, if there is a failure at
any point, the changes are cleanly reverted. Also, during an upgrade if any files are being replaced
(overwritten), backup copies of the original files are maintained so that they can be reverted to in the case of
an upgrade failure.
•
System Repair:
Windows Repair, which can repair improperly installed applications, is now supported.
Windows Repair can reinstall the application to repair any corrupted or missing data, including files, registry
keys, services, etc.
•
Smoother Upgrades:
The MSI installer allows for smoother upgrades since the new version is installed on
top of the older version. Also, in the unlikely case that an upgrade fails, a backup copy of the original
installation is maintained, allowing for a simple rollback to the original version.
•
Improved Logging and Troubleshooting:
MSI installers allow for more detailed logging of system actions
taken during installations and upgrades. This allows for easier troubleshooting and debugging in the unlikely
event that anything goes wrong.
Compatible with:
SA Series SSL VPN 7.1
IC Series UAC 4.1
