Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS, Manual

Page: 229 / 302

229
Appendix A
Fortezza
Fortezza is a cryptographic system that combines the use of hardware-based
tokens and software-based algorithms to secure electronic information exchange.
The US government developed Fortezza to manage sensitive but unclassified
information. The information in this chapter applies only to US government
agencies and businesses that work with the US government.
How It Works
Fortezza provides a higher level of security than typical encryption systems
because it requires three elements:
• A crypto card, which contains a user’s unique cryptographic key
• Fortezza encryption algorithms
• Fortezza key management
First, the US government provides your department or agency access to a
certificate authority workstation. The workstation itself may or may not be located
at your worksite. A certificate authority (CA) representing your department or
agency operates the certificate authority workstation. The CA may be a security
office or other designee who establishes, authenticates, and programs Fortezza
crypto cards. A Fortezza crypto card is a PCMCIA card that has been activated and
issued by the CA. The CA also maintains and revokes user keys and certificates as
necessary.
Information system (IS) administrators install Fortezza software and card readers
on some or all of your enterprise servers, and then card readers are installed on
your users’ computers or workstations. Netscape Fortezza products are designed
to operate properly with any PCMCIA-compliant card reader that is supported by
the Litronic device driver.