Intercede, a cybersecurity software company specialising in digital identities, has announced that the latest version of its credential management system – MyID CMS – is the first to support Enterprise Attestation within the FIDO authentication framework. Integrated with Yubico’s industry-first Enterprise Attestation-enabled security keys – the YubiKey, MyID CMS v12.15 delivers a complete solution for organisations requiring the highest levels of security and device control.

Enterprise Attestation represents a critical advancement in enterprise security architecture, providing organisations with the ability to identify and verify individual authenticators before allowing access to regulated and protected environments. Unlike standard FIDO implementations that prioritise user privacy through anonymous attestation, Enterprise Attestation enables IT administrators to maintain precise visibility and control over security devices deployed across their organisation.

Allen Storey, Chief Product Officer at Intercede said: “Our customers are often used to the levels of control, management, tracking and traceability that PKI smart cards provide, where each device has a unique serial number that ensures they are only issuing keys that they own. Enterprise Attestation enables FIDO authenticators to be uniquely identified, bringing the increased security and visibility that our high-assurance customers require.”

The new capabilities within MyID CMS addresses a persistent challenge in enterprise FIDO deployments: the gap between strong authentication and organisational control. With Enterprise Attestation, only approved, company-issued authenticators are permitted to be issued to access sensitive systems, while maintaining detailed audit trails of device management across the organisation.

Key benefits of the integrated solution include:

• Device-level visibility: Complete tracking and management of security keys throughout their lifecycle
• Policy enforcement: Granular control over which devices can access specific resources
• Audit compliance: Comprehensive logging and reporting for regulatory requirements
• Risk mitigation: Immediate ability to identify and revoke compromised or lost devices
• Seamless integration: Native support within existing identity and access management infrastructure.

In addition to Enterprise attestation, MyID CMS v12.15 adds support for PIN management features including minimum PIN length and forcing a PIN change at first usage. These enable ‘issue on behalf of’ scenarios and bring additional organisational control and security benefits.

Intercede’s collaboration with Yubico gives organisations access to the complete technology stack needed for the deployment of YubiKeys at scale. YubiKey’s are the first hardware authenticators to implement Enterprise Attestation capabilities, providing the foundation for the MyID CMS platform.

“Enterprise Attestation is a critical capability for organisations that require precise control over their security infrastructure, enabling them to more easily track and allow only trusted and approved devices that are designed and configured specifically for the customers unique needs,” said Jeff Wallace, SVP of Product at Yubico. “Our partnership with Intercede provides enterprises with a complete ecosystem for deploying FIDO authentication, while preserving the device-level visibility and management required in regulated environments.”

Enterprise Attestation functionality is particularly valuable for organisations with strong security requirements, including government agencies, financial services, healthcare, and critical infrastructure providers. These sectors often require detailed device tracking and the ability to restrict access to only pre-approved authenticators.

Storey adds: “Organisations can now deploy passwordless authentication at scale while maintaining the device-level control that enterprise security policies demand,” He continues:  “This combination of security and manageability removes the final barriers to widespread FIDO adoption in regulated environments.”

Demonstration and Implementation

Intercede and Yubico will be providing in-depth education sessions on Enterprise Attestation implementation at the upcoming Authenticate conference. Organisations can also watch a series of online demonstrations that showcase how MyID CMS addresses real-world scenarios, including device enrolment, policy management, and audit reporting functions. To watch the videos, visit: www.intercede.com

Availability

MyID CMS 12.15 is available immediately for new and existing Intercede customers.

For more information about Intercede’s Enterprise Attestation solution and to schedule a one-to-one demonstration, visit www.intercede.com

For more cyber news, click here