Citrix Password Manager 4.5 Partner and Sales FAQ

Citrix Password Manager 4.5 Partner and Sales FAQ I. Messaging and Positioning... 2 What is Password Manager?... 2 What is Citrix announcing with the availability of Password Manager 4.5?... 3 Why is Password Manager being expanded into a product line?... 3 Why should my Presentation Server customers install Password Manager for Presentation Server?... 4 Does Password Manager for Presentation Server only run on Presentation Server?... 5 What new features and capabilities are being announced with Password Manager 4.5?... 5 What are the Differences between Hot Desktop and Windows XP fast user switching?... 6 Why should resellers sell Citrix Password Manager?... 7 II. Packaging and SKUs... 8 How is Citrix Password Manager packaged?... 8 What if customers want to re-order older versions of Citrix Password Manager?... 8 III. Pricing and Licensing... 9 How is Citrix Password Manager licensed?... 9 How is Citrix Password Manager Priced?... 9 How does the price of Citrix Password Manager compare to the competition?... 10 What if customers want only Self-Service Password Reset?... 10 IV. Migration... 11 How do existing customers migrate to Citrix Password Manager 4.5?... 11 I previously bought an earlier version of Password Manager and am current with my Subscription Advantage. Which version of Password Manager should I download?... 11 V. Ordering and Delivery... 11 When will Citrix Password Manager 4.5 be available for ordering?... 11 Is there a minimum initial purchase requirement?... 12 How much does Subscription Advantage cost?... 12 How do customers obtain evaluation media?... 12 How do resellers obtain their NFR s and Internal-user media?... 13 VI. Training, Certification, and More Information... 13 How can I learn more about Citrix Password Manager?... 13 How can I obtain information about training and certification?... 13 Where can I take Citrix Education Classes?... 13

I. MESSAGING AND POSITIONING WHAT IS PASSWORD MANAGER? Password Manager is: An application security tool that enables organizations to centrally manage passwords for greater control. Application security may be dialed up through the use of configurable settings the control the strength of the application passwords, the frequency of the password refresh cycle, whether password changes are automated or completely transparent to the user, and whether the user may reveal their passwords to themselves. Password Manager also provides an integration point for deploying strong authentication solutions such as smart cards, proximity badges, tokens and biometrics. Password Manager is also a productivity tool that simplifies user access and enables authentication to all password-protected applications Windows, Web, and host-based with a single logon. Users authenticate once with their primary network password and the enterprise single sign-on solution authenticates the user to their password-protected applications, automatically submitting credentials on the user s behalf. Password Manager also facilitates regulatory compliance by helping organizations comply with government regulations through stronger authentication controls, application security, logging and reporting capabilities. Lastly, it is a cost-savings tool that provides user self-service features such as Self-Service Password Reset and Account Unlock both through Citrix Web Interface and locally from the Microsoft GINA. Time consuming and costly calls to the help desk are a thing of the past. Page 2 Updated: 10 November 2006

WHAT IS CITRIX ANNOUNCING WITH THE AVAILABILITY OF PASSWORD MANAGER 4.5? Already as the top rated enterprise single sign-on (ESSO) product by Gartner, Password Manager has been expanded into a product line comprised of three editions: Password Manager 4.5 Advanced Edition -- Provides comprehensive ESSO and Password Management. Password Manager 4.5 Enterprise Edition -- Contains all the features of the Advanced Edition and adds Hot Desktop fast user switching, smartcard support including certificate-based smart cards, user self-service features including Self-Service Password Reset and Account Unlock, Account Association, and the ability to federate to Web applications. Password Manager 4.5 for Presentation Server -- Contains all the features of the Enterprise Edition and adds user self-service features such as Self-Service Password Reset and Account Unlock through Web Interface, Hot Desktop fast user switching with SmoothRoaming, clientless single sign-on, concurrent user licensing to match existing Presentation Server deployments, and the ability to federate to any application delivered by Presentation Server. Password Manager for Presentation Server is the best way to strengthen application security and simplify user access to all applications delivered by Presentation Server. WHY IS PASSWORD MANAGER BEING EXPANDED INTO A PRODUCT LINE? Password Manager is being expanded into a product line for the following key reasons: To offer the best value proposition among ESSO solutions on the market. Password Manager was recognized as the only Strong Positive in the Gartner MarketScope for ESSO Products, 2006. Citrix has now added new capabilities and features to an already highly regarded product, while simultaneously lowering the price! To enable our partners to focus on cross-selling Password Manager to our installed base of Presentation Server customers. Password Manager increases application security of all Presentation Server applications in a single step. It enables organizations to add strong password policies and strong authentication (biometrics, tokens, etc.) to all Presentation Server applications without modification. Page 3 Updated: 10 November 2006

To offer the right Password Manager product at the right price for all types of organizations. Password Manager is the ideal SSO solution for Presentation Server environments, Healthcare, Financial Services, and Government Accounts. Customers can now purchase based on the feature set and licensing method that makes the most sense for their organization. To simplify purchasing. Most ESSO vendors have a base price and charge extra for optional a la carte features. The Password Manager product line makes it easy to choose the product that is right for a particular set of needs. WHY SHOULD MY PRESENTATION SERVER CUSTOMERS INSTALL PASSWORD MANAGER FOR PRESENTATION SERVER? Deploying password-protected applications on Presentation Server is virtually universal and so are the numerous complications and poor practices associated with passwords. Password Manager for Presentation Server provides: Single sign-on from any Presentation Server access scenario -- Whether users are accessing their applications from a published desktop, through Program Neighborhood, or remotely through Web Interface, they are accessed with a single logon. In short, simple and secure access is provided without further desktop configuration. Easiest way to improve increase application security for all applications delivered by Presentation Server -- With password management now centralized, just as Presentation Server customers have centralized application delivery, Presentation Server customers now have the ability to dialin the appropriate level of application security through a range of configurable security settings on a per application basis, including enabling Password Manager to transparently change passwords for users, obfuscating passwords from users, forcing more frequent password changes, and specifying password strength. Fast logons to Presentation Server applications Automate credential submission to all Windows, Web and terminal emulation based applications. Prevent password entry errors and guessing. Self-Service Password Reset through Web Interface -- Users can reset their password through Self-Service Password Reset integration with Web Interface. Users may also reset their password locally through the Microsoft GINA. Page 4 Updated: 10 November 2006

Federation to any application delivered by Presentation Server -- Active Directory Federated Services (ADFS), Kerberos, and Federated Environment support enable federation to any type of application--not just web apps delivered by Presentation Server and accessed through Web Interface. More ROI from your Presentation Server investment Easily deploy and provision Password Manager through Presentation Server. Integrate with Presentation Server policies to target user and/or applications for greater password security. Eliminating the number one help desk request - password resets - strengthening application security, and providing fast user logons makes Password Manager for Presentation Server the ideal single sign-on solution for Presentation Server environments. DOES PASSWORD MANAGER FOR PRESENTATION SERVER ONLY RUN ON PRESENTATION SERVER? No. Password Manager for Presentation Server can also be used for desktop applications. However, depending on the concurrency in a customer s environment and whether users also access local password-protected applications, either the Advanced or Enterprise edition may better meet customer needs. WHAT NEW FEATURES AND CAPABILITIES ARE BEING ANNOUNCED WITH PASSWORD MANAGER 4.5? With the launch of Password Manager 4.5, Citrix is announcing a number of new features and capabilities for Password Manager including: Enhanced Application Compatibility and Extensible Application Definitions - Further improves application compatibility out of the box. End-users experience SSO for a wider array of applications, while it is now easier and more intuitive to SSO-enable applications for administrators, due to enhanced application configuration workflow. Web-Based User Self-Service via Citrix Web Interface - Help desk calls are further reduced because remote users, including contractors and remote employees who access their applications from outside the corporate network via web interface, may now access User Self-Service features remotely. Page 5 Updated: 10 November 2006

Kerberos and Federated Environment Support (ADFS, SAML) - Password Manager now supports single sign-on to rich-client applications across web domains, once the user has authenticated to their organization s primary domain. In conjunction with Presentation and Web Interface, users may federate to any application delivered by Presentation Server. Administration by Active Directory Groups - Password Manager now integrates better with the way most companies manage their AD environments, providing greater administration flexibility, and enabling easier deployment of Password Manager to targeted user populations. Sense and Respond Password Change Wizard - Simplifies the process of changing passwords for the end-user, and provides immediate verification of a successful password change. Account Association - Users with multiple accounts can now use Password Manager regardless of which account they use to log in. Common Criteria EAL-2 Certification (CPM 4.5 Enterprise Edition and CPM for PS only) Common Criteria Certification is currently in process and expected to be complete in 1H07. This stringent security certification, recognized in 23 countries, enables sales of Password Manager to Federal Government accounts as well as to non-government accounts that are highly security conscious and value government certifications. WHAT ARE THE DIFFERENCES BETWEEN HOT DESKTOP AND WINDOWS XP FAST USER SWITCHING? Both Hot Desktop and Microsoft Windows XP Fast User Switching allow more than one person to share a computer. They both eliminate the need to perform a full Windows logon/logoff to change users. Microsoft Windows XP Fast User Switching changes user profiles without logging off other users. In contrast, Hot Desktop is a more powerful and secure form of Fast User Switching because it enables administrators to determine the actions of each user once they are logged in. Hot Desktop enables each user to retain their individual identities when logging in to applications from the Hot Desktop environment. This is critical for auditing and reporting purposes and eliminates the need for generic, shared accounts. Page 6 Updated: 10 November 2006

WHY SHOULD RESELLERS SELL CITRIX PASSWORD MANAGER? Resellers should sell Password Manager for a number of reasons including: The opportunity to not only make money on initial Password Manager licensing, but to wrap lucrative services offerings around the installation, configuration, and user training aspects of the deployment process. Please refer to the new Password Manager Project Guide located on the MyCitrix web site for additional details. See table below for an example: Deployment Type Deployment Examples 500 Users 2,500 Users Citrix Presentation Server Only $5,135 $39,500 Desktop Only $10,270 $79,000 Mixed Deployments $15,405 $118,000 **Assumptions: See detailed discussion items in the Password Manager Services Revenue Opportunity section of the Password Manager Project Guide Tremendous cross-market opportunity, with especially strong demand in verticals including Healthcare, Government, Financial Services, Telecommunications, and Manufacturing. For example, in a recent survey of Healthcare CIOs, 66% indicated that they would implement ESSO in the next 24 months. Please refer to the CHIME CIO Survey results document located on the MyCitrix website. Of the thirteen leading vendors, Password Manager was rated as the only strong positive in Gartner s MarketScope for Enterprise Single Sign-on Products, 2006. Gartner has moved Enterprise Single Sign-on far to the right on their hype cycle for Identity and Access Management products indicating the technology has reached the plateau of productivity and is a mature, stable, technology that adds real value in customer deployments. The new Password Manager product line and Password Manager for Presentation Server Edition enables resellers to target their existing Citrix and Presentation Server customers with a logical add-on product that increases the security of every application deployed on Presentation Server while simplifying user access and increasing productivity. A win-win for the security team and user population. Page 7 Updated: 10 November 2006

Password Manager integrates easily into existing Presentation Server and non-presentation Server environments. Where Presentation Server is present, Password Manager leverages the same deployment mechanism, license server, console, and can be rolled out using Presentation Server policies. The ability to sell a complete Application Security solution. Citrix has partnered with the industry leaders in strong, or two-factor, authentication, user provisioning, context management and healthcare applications to enable the implementation of complete solutions as opposed to point products. Citrix Password Manager is easy to demonstrate and sell. Resellers have the opportunity to wrap lucrative services around each implementation. Enterprise single sign-on forecasts continue to grow year to year at an increasing rate. New product demos, customer videos, recorded presentations, and training materials make is easier to train and present the product. The ROI is clear and reduction in help desk costs are easily quantified. II. PACKAGING AND SKUS HOW IS CITRIX PASSWORD MANAGER PACKAGED? Citrix Password Manager 4.5 is offered in three editions and two licensing models. Concurrent user licensing is a great value when Password Manager is deployed in a Presentation Server environment. When deployed in mixed Presentation Server and desktop deployments, or when deployed strictly to the desktop, named user licensing becomes more cost-effective. As with other Citrix products, there are separate SKUs for the software user licenses and media kits. WHAT IF CUSTOMERS WANT TO RE-ORDER OLDER VERSIONS OF CITRIX PASSWORD MANAGER? Password Manager 4.1 will have the following end-of-life schedule: End of Sales: 30 November 2007 End of Maintenance: 30 November 2008 End of Life: 31 May 2009 Page 8 Updated: 10 November 2006

For the most accurate and up-to-date information, please visit our web site at http://www.citrix.com/productlifecycle. Customers who are using older versions of Password Manager who wish to re-order can do so until the End of Sales date listed. It is strongly recommended that customers utilize their Subscription Advantage membership to migrate to Citrix Password Manager 4.5. III. PRICING AND LICENSING HOW IS CITRIX PASSWORD MANAGER LICENSED? Customers may purchase Password Manager for Presentation Server with Concurrent User (CCU) licensing, and/or Password Manager Advanced or Enterprise Edition with Named User (NU) licensing. A Named User license is a license that is dedicated to a specific individual, while a Concurrent User license may be shared and therefore are especially appropriate in environments with a 2-to-1 or higher concurrency ratio. HOW IS CITRIX PASSWORD MANAGER PRICED? Item Citrix Password Manager Advanced Edition, Named User License (NU) - Includes 1-year of Subscription Advantage. Min. 5 per order. Citrix Password Manager Enterprise Edition, Named User License (NU) - Includes 1-year of Subscription Advantage. Min. 5 per order. Citrix Password Manager Subscription Advantage Renewal per Named User per year Citrix Password Manager for Presentation Server, Concurrent User License (CCU) - Includes 1-year of Subscription Advantage. Min. 5 per order. Citrix Password Manager Subscription Advantage Renewal per Concurrent User per year Note: All price references are in US Dollars SRP (US) $59/NU $75/NU see volume pricing tables $149/CCU $20/CCU Page 9 Updated: 10 November 2006

HOW DOES THE PRICE OF CITRIX PASSWORD MANAGER COMPARE TO THE COMPETITION? Citrix Password Manager is a superior value when compared with major competitors. Typically, they offer their products with NU licensing only. When compared to Password Manager NU pricing, Citrix is very competitive if not lower than competitors. Password Manager is offered in three editions with the feature sets clearly defined. Competitive offerings generally come as a base package with additional features price al la carte. They may appear lower at first glance but when compared apples to apples, are generally higher. Citrix includes a year of Subscription Advantage standard with each purchase while most competitors do not. As an example, the Enterprise Edition and Password Manager for Presentation Server both include Self-Service Password Reset and Hot Desktop fast user switching capability standard, while competitors charge extra for these options! WHAT IF CUSTOMERS WANT ONLY SELF-SERVICE PASSWORD RESET? Customers who purchase licenses of Password Manager are entitled to use Self-Service Password Reset and Account Unlock according to the following ratios: Password Manager for Presentation Server: Customers who purchase concurrent user licenses of Password Manager are entitled to user Self-Service Password Reset in a ratio of 10:1 (i.e. 10 Self- Service Password Reset named users for each concurrent user license). For example, a customer who purchases 100 concurrent user licenses of Password Manager is entitled to use Self-Service Password Reset for up to 1,000 named users. Password Manager Enterprise Edition: Customers who purchase named user licenses of Password Manager are entitled to user Self-Service Password Reset in a ratio of 5:1 (i.e. 5 Self-Service Password Reset named users for each named user license). For example, a customer who purchases 200 named user licenses of Password Manager is entitled to use Self-Service Password Reset for up to 1,000 named users. Page 10 Updated: 10 November 2006

IV. MIGRATION HOW DO EXISTING CUSTOMERS MIGRATE TO CITRIX PASSWORD MANAGER 4.5? Existing Password Manager customers with a valid Subscription Advantage contract can request Citrix Password Manager 4.5 at no additional cost. If Subscription Advantage has expired, customers will need to get current before requesting Password Manager 4.5. For more information, customers should contact their local Citrix reseller or Citrix Customer Care. Additional information is also available at www.citrix.com/sa I PREVIOUSLY BOUGHT AN EARLIER VERSION OF PASSWORD MANAGER AND AM CURRENT WITH MY SUBSCRIPTION ADVANTAGE. WHICH VERSION OF PASSWORD MANAGER SHOULD I DOWNLOAD? If you are running Concurrent User licenses, you are eligible to download Password Manager for Presentation Server. If you are running Named User licenses, you are eligible to download Password Manager Enterprise Edition. A license trade-in program is also available where you may trade one Concurrent User license for two Named User licenses once you have migrated to Password Manager 4.5. Organizations planning to deploy Password Manager for desktop applications may wish to consider the Named User licensing model if it better meets their needs. This trade-in can be accomplished free of charge on www.mycitrix.com V. ORDERING AND DELIVERY WHEN WILL CITRIX PASSWORD MANAGER 4.5 BE AVAILABLE FOR ORDERING? Citrix Password Manager 4.5 will be generally available for ordering on November 17, 2006 in North America and LAC, and on November 21, 2006 in EMEA and APAC. Page 11 Updated: 10 November 2006

IS THERE A MINIMUM INITIAL PURCHASE REQUIREMENT? Yes, Citrix Password Manager is available for purchase at a minimum of 5 Password Manager for Presentation Server, Password Manager Advanced or Enterprise Editions. For customers ordering through the Citrix Open and Flex licensing programs, a re-order minimum of 100 points must be met in order to purchase Password Manager. HOW MUCH DOES SUBSCRIPTION ADVANTAGE COST? Each Citrix Password Manager product includes 1-year of Subscription Advantage membership with each license. Every year customers must renew Subscription Advantage in order to continue to receive product updates. Subscription Advantage entitles customers to receive future software releases. Subscription Advantage does NOT include technical support. Subscription Advantage Eligibility Date for Password Manager 4.5: November 17, 2006 Existing Citrix Password Manager customers with a valid Subscription Advantage contract on or after November 17, 2006 are eligible to receive Citrix Password Manager 4.5 as a benefit of the Subscription Advantage program. Subscription Advantage renewal pricing is based on a calculated rate in the volume pricing tables for Password Manager Advanced and Enterprise Editions. Password Manager for Presentation Server renewal pricing is based on the applicable Geo Licensing Program. Customers that have allowed their Subscription Advantage membership to lapse should contact their local Citrix accesspartner or Citrix customer care. For more information, visit http://www.citrix.com/sa HOW DO CUSTOMERS OBTAIN EVALUATION MEDIA? Evaluation units are designed for use by customers who are piloting Citrix Password Manager and contain the same media as the retail product. To obtain evaluation media: Contact Citrix Customer Care or place an order within Outlook forms. Evaluation software and licenses are generally delivered the same day through Electronic Software Delivery (ESD) directly to the customer. Evaluation software includes 99 Concurrent/Named user licenses. Licenses expire after 90 days. Page 12 Updated: 10 November 2006

HOW DO RESELLERS OBTAIN THEIR NFR S AND INTERNAL-USER MEDIA? As a key benefit of membership in the Citrix Access Partner network, partners receive NFR and Internal Use software through two programs: Internal-Use Licenses are intended for use in a production environment. Partners use them to understand first-hand what Citrix Password Manager can do for their company. Internal use licenses are not to be transferred to any other organization, either temporarily or permanently. Not-For-Resale Licenses are intended to demonstrate Citrix Password Manager in a non-production environment. Partners use them to show customers what Citrix Password Manager can do for their companies. Not-for-resale licenses are not to be transferred to any other organization, either temporarily or permanently. VI. TRAINING, CERTIFICATION, AND MORE INFORMATION HOW CAN I LEARN MORE ABOUT CITRIX PASSWORD MANAGER? To learn more about Citrix Password Manager, visit the Password Manager page on Citrix.com at www.citrix.com/passwordmanager HOW CAN I OBTAIN INFORMATION ABOUT TRAINING AND CERTIFICATION? For information about training and certification, please visit www.citrix.com/edu WHERE CAN I TAKE CITRIX EDUCATION CLASSES? Citrix Education offers elearning and instructor-led training courses. Citrix offers a wide selection of both sales and technical courses. To obtain additional information on instructor-led training, visit www.citrix.com/edu and use the Citrix Authorized Learning Center (CALC) to find the nearest one in your area. For more information about elearning, visit www.citrix.com/edu Page 13 Updated: 10 November 2006