Air-Gapped Control Center (2H 2025)

   Centrally manage air-gapped MFA sites
   Push out configurations and updates
   Pull in logs and audit trails
   Reduce local administration

Take the pain out of MFA for multiple air-gapped sites. SurePassID makes it easy with our Air-Gapped Control Center.

TALK TO AN EXPERT
Air-Gapped-Control-Center-Hero-1

Multiple air-gapped sites with MFA? You need a single pane of glass

How do we know? Because our largest customers asked for it. Needing to deploy multi-factor authentication (MFA) across hundreds of SCIFs, their administrative pain was growing exponentially. We developed the Air-Gapped Control Center in conjunction with them.

SurePassID has been providing advanced user authentication solutions for IT/ OT and critical infrastructure for over a decade - and we constantly innovate.

40% of our install base - literally hundreds of customers - relies on SurePassID to lock down user access within their air-gapped environments. We draw on our lessons learned and cybersecurity best practices when we extend the technical capabilities of our platform and develop new solutions.

What makes our advanced, deploy-anywhere MFA platform the solution of choice for air-gapped needs? Because we stand behind it - the experts in air-gapped MFA.

Air-Gapped-Control-Center-Hero-2

Take the pain out of MFA for multiple air-gapped sites

Scale air-gapped MFA

  • Standardize MFA configurations
  • Easily deploy and maintain
  • Flexibly deal with use cases

Maximize efficiency

  • Benefit from automation
  • Reduce help desk burden
  • Lean on SurePassID technical support

Obtain visibility

  • Know local site configurations
  • Pull in logs and audit trails
  • Integrate with SIEM/SOAR platforms

Reduce costs

  • Less admin time required
  • Fewer help desk calls
  • Unbeatable SurePassID value

Air-Gapped Control Center - the right MFA solution for:

SurePassID-Defense-Aerospace-Chiclet-1

Defense and Aerospace

SCIFs. Secure enclaves. Highly constrained environments. If you're deploying MFA, you need the Air-Gapped Control Center.

SurePassID-OT-Chiclet-1

OT and Critical Infrastructure

Multiple air-gapped sites are typical of critical infrastructure sectors. Easily manage MFA across them with Air-Gapped Control Center.

SurePassID-Federal-SLED-Chiclet-1

Federal and SLED

From the military to state agencies, multiple air-gapped networks are ubiquitous. Enter MFA and the Air-Gapped Control Center.

Frequently asked questions about SurePassID air-gapped MFA

Does SurePassID need internet access during installation?

No. In air-gapped mode, SurePassID is a 100% air-gapped MFA solution that never requires internet access.

That includes air-gapped private clouds ("cloud-gapped" systems).

How long does it take to deploy SurePassID in an air-gapped network?

It depends. Air-gapped deployments vary depending on their scale, complexity, and regulatory requirements.

For a few users and endpoints with only a handful of applications to secure, deployment can be as simple as going live after a brief proof-of-concept.

For multiple sites with large numbers of users, heterogeneous apps and devices, and converged credentials or phishing-resistant MFA requirements, the proof-of-concept and deployment can take months.

Regardless, we always move as fast as you need us to - and our Customer Success team is with you every step of the way.

Mobile phones aren't allowed in my air-gapped environment. Can SurePassID provide hardware tokens too?

Yes. We provide a wide range of hardware authenticators ("tokens") - and if necessary, card readers and other complementary hardware - as part of a complete solution:

  • Traditional MFA tokens - OTP display cards, OTP keyfobs, etc.
  • Phishing-resistant passkeys - Yubico Yubikeys, wearable wristbands, etc.
  • Converged credentials - HID Global c2300 Crescendo cards, etc.

Can SurePassID integrate with my SCADA system?

Probably. We have pre-built integrations for many popular SCADA systems, such as EcoStruxure Geo SCADA Expert. We also have a wide range of capabilities to lock down SCADA systems:

  • SAML2
  • RADIUS (and FreeRADIUS)
  • LDAP/LDAPS
  • Reverse Proxy Server MFA
  • RESTful API

But there are thousands of different SCADA systems out there, including legacy software applications running on legacy hardware with challenging limitations. It's not always possible - or cost-effective - to add MFA.

Check with us to see if we can integrate with your SCADA system.

I have Raspberry Pi devices in my secure enclave. Can SurePassID lock those down?

Yes. We have PAMs for Raspberry Pi OS (Raspbian/Debian) and other Linux variants.

Providing air-gapped MFA to 11 of 16 critical infrastructure sectors ... and counting

SurePassID is proud to protect customers that own, support, and supply critical infrastructure - no matter what sector they are in.

SEE INDUSTRIES
MSP-chiclet

Could you benefit from a single pane of glass for your air-gapped MFA sites?

Talk to one of our MFA experts about your multiple air-gapped environments and needs. We are always happy to share our insights and expertise and help identify solutions.

TALK TO AN EXPERT