MFA for

Defense and Aerospace

Highly secure, highly extensible, and built for CMMC 2.0

  • On-prem
  • Private clouds
  • Air-gapped systems

SurePassID Universal Server takes the pain out of DoD MFA requirements

The Defense Industrial Base faces unprecedented cybersecurity challenges. Employees, contractors, and partners need access to applications and data across the IT/OT spectrum, often while working remotely using their own devices. Meanwhile penetration attempts using stolen credentials and insider attacks are at an all-time high, threatening Intellectual Property (IP), Personally Identifiable Information (PII), Classified Information (CI), and Controlled Unclassified Information (CUI). This has led to Multi-Factor Authentication (MFA) requirements in new mandates that defense contractors must meet:

SurePassID specializes in highly secure, highly extensible solutions for compliance with MFA requirements. Customers from Top 5 prime contractors to small manufacturing companies rely upon our SurePassID Universal Server for secure access to their apps and data. You can too.


SurePassID Universal Server secures the CUI that no other MFA solution can

On Prem/Private Clouds

CUI often lives in on-prem data centers or hosted private clouds. SurePassID secures access to all of them, including GCC High instances.

Shop Floors

When CUI goes to the manufacturing shop floor, SurePassID secures it on Operational Technology (OT) industrial control systems.

Air-Gapped Systems

CUI in air-gapped systems like secure enclaves, intellectual property repositories, and SCIFs/SAPFs? Not a problem for SurePassID.


Top 5 Prime Contractor uses SurePassID Universal Server for MFA Consolidation


Benefits of SurePassID Universal Server for Defense and Aerospace MFA

CMMC 2.0 Compliance

Where CUI goes, MFA must follow. Only SurePassID secures user access to all IT/OT apps and their data.

Secured IT/OT Apps

Zero Trust = IT in the cloud, OT on-prem or in private clouds. SurePassID makes it easy to secure all apps no matter where they live.

4 Nines Availability

MFA is mission critical for your business. SurePassID has the availability, redundancy, and automatic failover you need. 

Improved MFA ROI

From administrative automation to MFA consolidation, SurePassID gives you the maximum leverage on MFA ROI.

Cyber Liability Insurance

Securing admin accounts with MFA is a foundational requirement of CLI. Achieve it rapidly and cost-effectively with SurePassID.

Phishing- Resistant MFA

FIDO2 and CAC/PIV are the only two forms of phishing-resistant MFA that exist today. SurePassID enables you to make the most of both.

360° View of User Access

SurePassID delivers a 360 degree view of user access across your IT/OT apps and integrates it with your SIEM or SOAR solution.

AI-Based Access Monitoring

SurePassID’s AI-based access monitoring automates the alerting and interventions associated with lateral movement and unauthorized access.

Kevin McDonald

“SurePassID is a valued partner for helping our clients achieve NIST and CMMC cybersecurity compliances. They meet requirements other MFA providers cannot and deliver outstanding support. We would recommend them to any company looking for a multi-factor authentication solution with a knowledgeable, committed team standing behind it.”


SurePassID Universal Server works with all open-standard authenticators

HID Global
Mobile Apps

Authenticators are the user experience of MFA. SurePassID works with all open-standard authenticators, enabling you to meet any use case or budget requirement.

  • Phishing-Resistant FIDO2 Security Keys
  • FIPS 140 Validated Tokens
  • OTP Keyfobs and Display Cards
  • Converged Credentials
  • Mobile Apps

With SurePassID you can mix-and-match authenticators for specific users or user categories, and import any existing tokens you may have.


FAQs about SurePassID and our Universal Server solution

  • Software-as-a-Service (SaaS)
  • Windows Installer Package (Microsoft Windows Server 2008/2012/2016/2019/2022)
  • Virtual Machine (Microsoft Hyper-V)
  • Container (Docker/Kubernetes, Microsoft ACI, Amazon ECS)
  • Serverless/Function-as-a-Service (FaaS)
  • Embedded (8, 16, or 32-bit microcontrollers)

Cloud deployments can occur same day. On-prem deployments will vary depending on the complexity of your requirements. Regardless, our Customer Success team is with you every step of the way.

SurePassID is the most hardened MFA solution on the market. Customers choose us because we specialize in securing user access to critical infrastructure. We never stop innovating to protect our customers from evolving cyberthreats.

As a SAML 2.0 IdP, SurePassID easily and seamlessly integrates with any on-prem (e.g. Ping Identity) or cloud-only (e.g. Okta) IAM solution.

  1. Unmatched on-prem and OT capabilities
  2. Outstanding technical support
  3. Unbeatable value

Visit for a complete guide to SurePassID Universal Server pricing and features.

Discover why SurePassID Universal Server is the best MFA solution for Defense and Aerospace

Talk with one of our MFA experts about your unique requirements. Or begin a free trial and see how easy it is to secure your universe of apps with SurePassID Universal Server.