A Stockholm-based credential management leader has released a major platform update that significantly simplifies the path to passwordless enterprise security, introducing a new authentication server designed to eliminate the complexity and risk associated with managing passwords across modern hybrid IT environments.
The Next Step Toward a Password-Free Enterprise
Versasec has announced vSEC:CMS 7.4, featuring the debut of vSEC:CMS Identity — an advanced multi-factor authentication server integrated directly with the company’s existing credential management platform. The new release accelerates FIDO2 passkey adoption by allowing organizations to close exposed security gaps without overhauling their entire identity infrastructure.
Passwords remain one of the most persistent sources of enterprise security risk. They can be phished, stolen, reused, and forgotten — creating constant vulnerabilities that attackers actively exploit. The move toward passkeys and FIDO2 authentication represents a meaningful architectural shift: rather than managing shared secrets, organizations move to device-bound cryptographic credentials that are far harder to compromise.
Key Innovations in vSEC:CMS 7.4
Instant FIDO2 Passkey Issuance
The new authentication server integrates directly into existing vSEC:CMS deployments. During the initial credential issuance workflow, administrators can generate a device-bound FIDO2 passkey simultaneously — enabling immediate user authentication without separate provisioning steps or additional tools.
Frictionless Hybrid Directory Management
One of the most practically impactful features is the ability to use a primary Active Directory account as the identity foundation for issuing both PKI certificates and FIDO2 passkeys simultaneously, while connecting directly to Azure Entra ID. This eliminates duplicate accounts and insecure workarounds that organizations often resort to when managing hybrid environments — a common pain point for IT teams supporting a mix of on-premises and cloud systems.
Business Continuity and Expanded Hardware Support
The update also addresses practical business continuity scenarios: administrators can configure short-lived temporary domain passwords for accounts when a hardware token is misplaced and immediate replacement isn’t possible. Additionally, the release introduces full lifecycle management for Yubico Security Key Enterprise Edition via the YubiKey as a Service (YaaS) program, expanding the hardware ecosystem available to organizations standardizing on FIDO2 authentication.
Flexible Deployment Without Compromising Sovereignty
vSEC:CMS Identity supports on-premises, air-gapped, and private cloud deployments — an important distinction for organizations in regulated industries or those with strict data sovereignty requirements. By maintaining complete control over their security infrastructure without outsourcing trust to external cloud identity providers, organizations can adopt modern authentication standards while meeting their compliance obligations.
The vSEC:CMS Identity authentication server comes included for customers on vSEC:CMS Premium and vSEC:CLOUD plans, making the upgrade path straightforward for Versasec’s existing customer base.
