EMBASSY® Security Center (ESC) Overview

Description:

The Wave Systems EMBASSY Security Center (ESC) provides the tools for managing the PCs Trusted Platform Module (TPM) which conforms to the standard by the Trusted Computing Group (TCG). ESC also contains advanced password management and authentication functions, including:

TPM Owner Management - Take ownership of the TPM and manage the TPM owner password.
Password Management - Enable the ESC TCG Security Password Vault to simplify the user experience when using a TPM. Adjust the security settings to define how often users must be authenticated when using the TPM. Access the password settings for websites and applications when Wave Systems Private Information Manager is installed.
Fingerprint Biometrics Support - ESC supports fingerprint biometric authentication in addition to or in place of the standard password authentication.
Secure Login - Enable Secure Login in ESC to use fingerprint biometric authentication during the Windows account login process.
TPM Key Archive - ESC provides simplified archive and restore functions for TPM keys and the Wave TCG Enabled Cryptographic Service Provider (CSP).
Optional Advanced TPM Key Archive - ESC automatically recognizes platforms running Wave Systems Key Transfer Manager (KTM). ESC is seamlessly integrated with Key Transfer Manager and will automatically configure itself to take advantage of Key Transfer Manager's advanced archive capabilities, including automated key archiving and KTM server integration.
Optional Advanced Authentication - With Wave Systems EMBASSY Authentication Server, the IT administrator enables advanced authentication services for domain users. A combination of the following factors may be used: smart card, fingerprint, TPM certificate, or password.
Owner Services - Assign and manage TPM owner rights to other users of the system. (Only present for compatible systems)
Preboot Management - Enable authentication before the operating system is loaded by using a smart card or fingerprint.
Trusted Drive Manager - TDM provides complete management of a Trusted Drive present in the system. TDM is only available for systems equipped with a Trusted Drive.

Article ID: ESC-001
Last Reviewed: October 8, 2009