VPN Rootoken

Main article: VPN and privacy (anonymity)

VPN Rootoken is a solution for secure access to enterprise IT systems from anywhere on the network. Focused on small and medium businesses.

History of development

2021

Share Source Code Rutoken VPN Community Edition

The company "Asset" December 22, 2021 announced the provision of open access on the GitHub of the source code of the Windows client for the product Rutoken VPN version of Community Edition. This software is designed to connect users to the product server and provide secure access.

The Rutoken VPN Community Edition product source code for secure remote operation and secure access to enterprise IT systems in a small and medium-sized business environment was made publicly available by the developers of Asset in May 2021. At that time, IT specialists were given the opportunity to refine the code, optimize the installation and configuration of the solution for remote work on their own, as well as through the development of the product by the community on the GitHub.

The developer community is provided with the source code of the VPN Community Edition client for Windows. This version does not support working with GOST certificates on media, however, it helps to equip Rutoken VPN Community Edition with a customized client and makes it possible to expand the client's functionality.

Source Availability VPN Community Edition

On May 27, 2021, Asset, a Russian developer of information security software and hardware, announced the provision of open source product code for organizing secure remote work - Rutoken VPN Community Edition.

VPN Rootoken is a complete solution for remote operation and secure access to enterprise IT systems from anywhere in the world. The solution involves using two-factor authentication cryptographic lines EDS Rutoken 2.0, SC, EDS EDS using tokens. PKI

The introduction of Rutoken VPN Community Edition source code in open sources gives IT specialists the opportunity to refine the code, optimize the installation and configuration of a solution for remote work on their own, as well as through the development of the product by the community on. GitHub The Rutoken VPN Community Edition solution is free. It supports cryptographic algorithm with the RSA public key, but does not support protocols enciphering using cryptographic algorithms GOST R 34.10-2012 and GOST R 34.12-2015, and also does not involve technical support and regular system updating of packages. You can access the Root VPN Community Edition source code from the GitHub portal.^[1]

The Rutoken VPN remote solution in the Enterprise commercial version, focused on small and medium-sized businesses, also remains available for purchase. This solution provides support for GOST cryptographic algorithms, delivery in the form of a virtual machine and simple configuration that does not require the involvement of technical specialists. The VPN Enterprise Rootoken provides technical support for the Routoken VPN project of the company "Asset" and the availability of regular updates to system packages.

2020: Donation for the coronavirus epidemic

March 24, 2020 company Asset"" announced the proposal of a solution for the organization of safe remote work on special conditions. As part of the action, until May 1, 2020, there is a special price for a set USB of tokens, and EDS Rutoken PKI the Rutoken software product VPN is provided free of charge.

For secure remote operation, it is advisable to use a VPN with channel encryption. The most secure option is the addition of VPN solutions with two-factor authentication at remote workstations of employees using key media (usb tokens and smart cards). Two-factor authentication ensures that employees with USB tokens work in the system, and not intruders.

VPN Rootoken provides access to enterprise IT systems from anywhere in the world. Its main advantage is the ease of configuration and administration. Provides maximum security when working remotely with files, mail, 1C, and other office applications.

The VPN Rootoken allows you to:

• Protect transmitted data using Russian and western cryptoalgorisms;
• Implement protection against theft and interception passwords two-factor authentications using intelligent key Rutoken media;
• Quickly implement (~ 1 hour) and configure employee computers;
• Use both PC and mobile devices as clients.

Rutoken PKI EDS USB tokens were created specifically for the corporate segment. The devices come in standard token, micro token, and Type-C connector form factors. The main distinguishing feature of Rutoken EDS PKI is the high speed characteristics of Western cryptographic algorithms, in particular, RSA2048.

2017: November Update

On November 25, 2017, Asset announced the release of an updated version of the Rutoken VPN product.

The solution provides robust traffic encryption. The version for building the VPN channel uses cryptographic algorithms GOST R 34.10-2012 and GOST R 34.12-2015.

VPN Rootoken

Alternatively, RSA algorithms with a key length of 2048 bits and and AES of 256 bits can be used. The VPN Rootoken is based on OpenVPN and closed, non-attractable cryptographic keys.

The product integrates with Microsoft Active Directory in a few minutes and does not require special knowledge for configuration and administration. For Windows and OS X operating systems, a special client has been developed that does not require the installation of drivers. It is enough to install the client once on Rutoken EDS 2.0 Flash to use it on any computer. The product supports all the main client platforms: Windows, OSX, Android and IOS, and is also compatible with most Internet browsers - Google Chrome, Mozilla FireFox, Internet Explorer 10, etc.

2016: Release

On June 14, 2016, Asset announced the release of Rutoken VPN - for secure access to corporate IT systems from anywhere in the world^[2].

The basis of the VPN Rootoken is private keys stored on board a USB token, which ensures maximum security when working remotely with files, mail and 1C programs.

Product Setup Window screenshot, (2016)

The developers announced the use of persistent traffic encryption in the solution, which will not allow attackers to intercept a password or replace a certificate. Cryptographic algorithms RSA 2048 and AES 256 are used to organize the VPN channel, and all critical operations are performed "aboard" electronic identifiers Rutoken EDS or Rutoken EDS Flash, which are included in the delivery package. This ensures the maximum reliability of the Rutoken VPN, eliminates the possibility of using a corporate account by third parties.

According to the statements of the creators of the product, Rutoken VPN integrates with Microsoft Active Directory in a couple of minutes and does not require special knowledge for configuration and administration. In addition, a special client has been developed for Windows and OS X operating systems that does not require the installation of drivers. Install the client once on the key media to use it on any computer. As of June 14, 2016, the product supports all the main client platforms: Windows, OS X, Android and IOS, it is compatible with most Internet browsers - Google Chrome, Mozilla FireFox, Internet Explorer 10 and above.

VPN technologies, in addition to providing high network security, significantly reduce the cost of additional network equipment, training personnel and managing information systems. In addition, it is possible to free up human resources to concentrate on specialized areas of business. Sergey Soshnikov, Project Team Leader

Notes