NonStop Insider

job types

Site navigation

Recent articles



For monthly updates and news.
Subscribe here
NonStop Insider

Multi-Factor Authentication on Nonstop Made Easy!



CSP logo




Why is Multi-Factor Authentication so critical on NonStop?

Multi-Factor Authentication (MFA) is increasingly becoming one of the more critical security requirements to comply with regulations such as PCI 8.3 and GDPR, as well as to provide superior safety measures over easily compromised single password methods. Any application that has access to the cardholder environment must include Multi-Factor Authentication, from legacy Pathway applications to the latest RESTful interfaces, effective MFA must be provided for tools and applications that have the potential to access these environments.

CSP SEP 18 -1

The authentication mechanisms used for MFA should be independent of one another such that access to one factor does not grant access to any other factor, and the compromise of any one factor does not affect the integrity or confidentiality of any other factor.


What does PCI say about Multi-Factor Authentication?

One of the key changes to PCI DSS is an update to requirement 8.3, which now calls for organizations to strengthen their access security with MFA instead of the previously stated two-factor authentication. By changing the terminology of requirement 8.3, two forms of authentication are now the minimum requirement.

As detailed in PCI DSS version 3.2, any individuals with non-console administrative access to  Cardholder Data Environment (CDE) must authenticate using MFA. “Non-console administrative access” means that the system is accessed over a network, as opposed to the system’s local screen and keyboard. This applies regardless of whether the individual is an employee or third-party IT support personnel.


An Exciting New Solution for MFA: CSP Authenticator+

CSP SEP 18 -2

Multi-Factor authentication has become vital in ensuring secure access to systems. The new CSP Authenticator+provides a RESTful interface  to support multi-factor authenticated logins to NonStop systems.

CSP Authenticator+ can be used as a Safeguard Authentication SEEP or with Pathway and Non-Pathway applications. Methods supported include RSA SecurID, Email, Text Message, Google Authenticate and Radius. Many additional methods are planned for the future.

CSP Authenticator+ resides on the NonStop Platform and uses an OSS “bridge” to connect via a RESTful interface to the CSP MFA service. Almost any application, including TACL, can now easily support Multi-factor authentication.

CSP SEP 18 -3


Key features include:


So… What’s Next?

CSP has a major announcement regarding Multi-Factor Authentication and CSP Authenticator+, which will be unveiled at this year’s Nonstop Technical Boot Camp in Burlingame, CA. Stay tuned for more information regarding this revolutionary solution for MFA.

For more information on CSP solutions

For complimentary access to CSP-Wiki®, an extensive repository of NonStop security knowledge and best practices, please visit


We Built the Wiki for NonStop Security®

Visit us at these upcoming shows to learn more about our exciting solutions for NonStop and beyond:



The CSP Team                 

+1(905) 568 – 8900