While PKI holds the most promise in terms of network security, there are some economic and logistical challenges to be addressed. One issue is lack of portability. Once a certificate is issued, the private key material is generally stored on a specific computing resource. If the certificate is on a particular desktop, for example, users can access that information only through that one device.

It's also very complex, and consumes considerable time and resources to develop in-house. A comprehensive PKI infrastructure would be difficult to establish in less than one year. However, many of these challenges can be addressed by leveraging a managed PKI service combined with smart-card-enabled technology.

The Power of PKI and Smart Card
Managed PKI services can help alleviate the administrative and financial burden for enterprises, while delivering the security levels required. Combined with smart-card technology, it is also a very effective approach to securing remote access without having to incur infrastructure changes or high costs.

Pocket-sized, fully encrypted devices are now available that can address a number of threat-related issues and enable workers to conduct business remotely and securely without the need to carry a laptop.

This technology, when combined with a managed PKI service, allows fully encrypted, secure access to enterprise networks from any location, without data ever leaving the boundaries of the corporate firewall. That means travelers can travel more lightly and safely, and organizations can benefit from providing employees with inexpensive mobile access to data, applications and network resources from practically any Internet-enabled, Windows-based PC in the world.

Octagon Capital in Toronto has deployed a device combining smart-card technology with a managed PKI infrastructure to more than 40 of its investment advisers. As a tamper-resistant technology, the device meets stringent security certifications and can be operated only through a multiple-factor authentication process. If lost or stolen, it is completely ineffective and can be deactivated remotely if required.

This level of security is allowing considerably more freedom for remote functionality than ever before. The managed PKI platform means that remote workers can now safely access stock quotes, client information and monitor accounts—none of which could have been performed through regular Internet access.

For organizations such as Octagon, having this level of security for remote access is becoming an integral part of improving and expanding services to clients, as well as ensuring business continuity. Scaling up to meet the needs of a growing number of users is simply a matter of deploying additional devices.