ibm - partnerworld

Simplicity. Solutions. Specialty.
Greater innovation. Sustained strength. Access to a world of opportunity.

IBM PartnerWorld is an award-winning, global program designed to help our Business Partners increase demand, grow their business, improve profitability and enable their clients to participate in the revolution that is fueling a smarter planet.

IBM works alongside our Business Partners to create and deliver unique client value through our combined capabilities, expertise and offerings. More than 100,000 solution providers, independent software vendors, consultants and integrators have aligned their business with IBM and reap the rewards, including greater profitability, reach, access to new and emerging technologies, more satisfied and successful clients.

charismathics solutions are listed in the IBM directories

See charismathics product listings in the IBM Global Solution Directory:

both in Europe

charismathics smart security interface - CSSI – token middleware and full PKI client
charismathics plug’n’crypt USB key (e.g. for ISAM ESSO or Lotus Notes) incl. smart card security
charismathics smart security card – smart card (eg. for ISAM ESSO or Lotus Notes) native card or javacard

and in the US

charismathics smart security interface - CSSI – token middleware and full PKI client
charismathics plug’n’crypt USB key (e.g. for ISAM ESSO or Lotus Notes) incl. smart card security
charismathics smart security card – smart card (eg. for ISAM ESSO or Lotus Notes) native card or javacard

charismathics solutions are also listed in the IBM Integrated Service Management Library

charismathics smart security interface - CSSI - PKI client
Security Access Manager Enterprise Single Sign-On USB Key Initialization Tool - charismathics secure token configurator
IBM Security Access Manager for Enterprise Single Sign-On strong authentication using charismathics USB keys

The company itself is present in the IBM business locator

both with its headquarters in Germany
and its subsidiary office in the US

charismathics solutions are Ready for Tivoli certified

charismathics smart security interface© (CSSI) - charismathics token middleware and full PKI client, has been integrated into IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) and as such certified Ready for Tivoli.

As a result also the charismathics smart security card©, a native or Java-based smart card, as well as charismathics plug’n’crypt®, a USB token which combines the security of a smart card with flash memory storage and RFID contactless access, in bundle with CSSI provide 2-factor authentication to the IBM Single Sign-On solution. With the same device the user can also log to Lotus Notes, enjoy Windows inbuilt security features, run VPN clients and other third party application.

The same is true about charismathics Bluetooth-based smart phone application, iEnigma®, which is fully serving ISAM ESSO in both password and PKI mode. Thus, by entering the token PIN to iEnigma, the application will either transfer a cached password (manually or automatically) or a digital signature to the iEnigma credential provider, serving ISAM ESSO accordingly for a fully automated logon process in both ways. In the automatic mode, even the requirement of entering the password is eliminated, and the logon will be performed once the user is in the Bluetooth range of the computer.
Hence, iEnigma is not serving IBM´s products only for PKI purposes, but as most of the ISAM ESSO customers are password-based, it serves them as well. And by the way it fully plugs into CSSI, our well known PKI middleware, it therefore supports mixed environments of smart phones, USB tokens and smartcards even of different vendors.

charismathics solutions are credited in the IBM publications

IBM Security Access Manager for Enterprise Single Sign-On automates sign-on and access to enterprise applications, eliminating the need to remember and manage user names and passwords.

The Red Paper under the title of "Configuring Strong Authentication with IBM Security Access Manager for Enterprise Single Sign-On" shows additional technologies and specific examples based on charismathics CSSI to increase the security access level with the use of smart cards.

The additional Red Book publication "Enterprise Single Sign-On Design Guide Using IBM Security Access Manager for Enterprise Single Sign-On 8.2" offers security officers, administrators, and architects an overview about how to implement a strong authentication based identity management solution in a medium scale environment.

iEnigma application: integration with IBM Security Access Manager for Enterprise Single Sign-On (1-user scenario)

The IBM Security Access Manager for Enterprise Single Sign-On is a Single Sign-On software for enterprises. Starting iEnigma on your smart phone it will connect to the ISAM ESSO credential provider, detect the application and log you to the system at the same time as ISAM ESSO logs you into the general application. When you're leaving your desk for a lunch break or a meeting, as soon as you are out of the bluetooth range of your computer, iEnigma will automatically log you off of Windows and ISAM ESSO itself. Coming back from your meeting iEnigma will be detected by your computer the moment it reaches the bluetooth range, and by pressing the Enter key it will log you into Windows and ISAM ESSO as you have left your computer before.

iEnigma application: integration with IBM Security Access Manager for Enterprise Single Sign-On (2-users scenario)

An important use case for the ISAM ESSO product is when two users are logging on to the same computer. Starting iEnigma the first user will be logged on by the detection of the smart phone application. By entering the PIN of the smart phone token and pressing Enter the Windows logon will be performed together with the ISAM ESSO logon at the same time. If the first user leaves his desk, as soon as he's out of bluetooth range of the computer, Windows is logged off and the user is logged off from the ISAM ESSO application at the same time. The second user that approaches the computer will be detected by the application automatically and is required to enter the PIN, the same way the first user did before. iEnigma performs the logon to Windows and to ISAM ESSO simultaneously. If the second user leaves the bluetooth range, he will also be logged off of the computer and of the ISAM ESSO application. If the first user then comes back to his desk, iEnigma detects the first session, does not require the user to enter the PIN anymore, logs on to Windows and to ISAM ESSO and gets back to the first session.

back to memberships