ADmitMac PKI v3.1

Mac OS X Active Directory end-to-end enterprise CAC, PIV and PIV-I

ADmitMac ® PKI is the third generation of Thursby's Mac high security smart card software with Active Directory support.  Our one-stop solution meets end-to-end Mac-Windows management and high security needs for US Government CAC, PIV or  PIV-I for Macs directly connected to high security networks, ensuring compliance with standards such as HSPD-12, OMB-11-11 and FIPS 201.  ADmitMac PKI is short for Active Directory admit Mac with Public Key Infrastructure and pronounced "Admit Mac PKI". 

Highlights

• Complete, road mapped and fully supported production software
• True 2-factor Snow Leopard and Leopard support
• All US Government CAC, PIV and PIV-I via Thursby TokenD "drivers"
• All CAC-NG like Oberthur ID One 128 v5.5 Dual (has done so for a very long time)
• True PKE Single Sign-On (SSO) with Kerberos PKINIT
• Axway / Tumbleweed / Online Certificate Status Protocol (OCSP)
• VPN (Virtual Private Network) support
• Signing, encryption and decryption of e-mail support
• Client-based solution requiring no new server software integration and/or user access fees
• No schema changes required
• Includes ADmitMac technology for Identity and access management (IAM) for Macs from either Windows Active DirectoryGroup Policy Objects (GPO) or Mac Workgroup Manager (WGM)
• Includes DAVE technology for commercial grade file and printer sharing with full, commercial grade Microsoft DFS and Microsoft SMB/CIFS
• Deployment tools for Volume License Agreement (VLA) users
• Proven, robust and highly scalable
• Mac OS X management and high security smart card market leader for 6 years

Free enterprise trial

• All Thursby enterprise products are available for free trial prior to purchase
• These are full function, fully documented site licenses including free technical support to facilitate enterprise deployment and scalability testing

Decades of experience build-in lower TCO

• Simple - client-based, no lock-in to proprietary Windows server software, no NOC, no OS X Server and no schema changes for simple deployment and maintenance
• Transparent - leverages standard Windows or Mac tools, infrastructure and processes for reduced costs, time-lines, risk and overall rollout complexity, with greater security
• Complete - everything included end-to-end, so no hidden costs for server software or access fees, missing features, required 3rd party software, required training or professional services and backed by 100% Apple-Microsoft engineering and support specialists

Pricing

• Click here for pricing information

Informational videos

• ADmitMac PKI Fast Facts video
  
• ADmitMac PKI demo
  

Lion beta

• For DoD or Federal testing around ADmitMac v4 and Lion, please contact us directly
• Free upgrade for all users with active maintenance
• Enforces true 2-factor smart card reading (what I have) and PIN (what I know) inline with HSPD-12, OMB-11-11 and FIPS 201 standards, closing backdoors that seek to bypass security e.g. using alternative identifiers/passwords
• For simple web or web VPN use cases on Leopard, Snow Leopard or Lion, PKard for Mac is the recommended solution

Additional capabilities

• Meets DoD PKI requirements
• Direct smart card middleware support
• Automatic PKI trust configuration
• "sudo" replacement via smart card for administration
• Alternate smart card login, allowing two cards at once
• Publishes CAC Certificates in Active Directory
• Network Home Folders - files and home directories can reside on any authorized, accessible network volume
• Mobile Accounts - caches successful user login information, allowing notebook users to login using their domain account while disconnected from the network
• Compatible with popular Mac enterprise anti-virus, deployment, encryption, maintenance and virtualization tools
• US-engineered and proudly supported by Mac-Windows specialists from Arlington, Texas