Amazon Web Services now lets enterprises use two-factor authentication to better protect hosted WorkSpaces virtual desktops.
The steady stream of incidents in which hackers have been able to access traditional passwords highlight the need for something more secure over and over again. Adding so-called two-factor authentication increases security by validating users with something they know (a regular password) and something they have (a hardware or software generated one-time password).
[ It's time to rethink security. Two former CIOs show you how to rething your security strategy for today's world. Bonus: Available in PDF and e-book versions. | Stay up to date on the latest security developments with InfoWorld's Security Central newsletter.
Protecting Workspaces desktops with two-factor authentication helps prevent unauthorized users from gaining access to enterprise resources, while defending against password attacks such as phishing and keystroke logging. The feature itself is available now at no extra charge, Amazon said in a blog post.
For the authentication to work, organizations need a Radius server. Amazon has verified its implementation against the Symantec VIP (Validation and ID Protection) and Microsoft Radius Server products.
Gemalto offers two products that can be used to generate the one-time passwords; the Ezio keyfob costs $12.99 and the Ezio display card costs $19.99. The six digit passwords they generate are valid for one attempt and for 30 seconds.
For companies that don't want to roll out new hardware, there are applications for Android, BlackBerry OS, iOS and Windows. The applications are free, but aren't considered as secure.
To help IT departments get started, Amazon has updated its administration guide with instructions on how to activate the improved authentication.
Amazon Workspaces was made generally available at the end of March. The service offers managed virtual desktops users can access from PCs, Macs, Apple's iPads and tablets based on Android, including Amazon's own Kindle Fire products.
This article has been extracted from http://www.infoworld.com, please click on this link to read the article in full http://www.infoworld.com/d/security/amazon-protects-its-virtual-desktops-two-factor-authentication-248165
Montash is a multi-award winning, global IT recruitment firm. Specialising in permanent and contract positions across mid-senior appointments which cover a wide range of industry sectors and IT functions, including:
ERP, BI & Data, Information Security, IT Architecture & Strategy, Scientific Technologies, Demand IT and Business Engagement, Digital and E-commerce, Infrastructure and Service Delivery, Project and Programme Delivery.
With offices based in London, Montash has completed assignments in over 30 countries and has appointed technical professionals from board level to senior and mid-management in permanent and contract roles.