Network Access Control For Dummies®

13.4. Open NAC Standards

Open NAC standards include the Trusted Network Connect (TNC) and the Network Endpoint Assessment (NEA) from the IETF. Many vendors actively implement TNC as part of their shipping NAC solutions, and NEA's standards body is, while we write this book, in the process of finalizing it.

13.4.1. Trusting TNC

The Trusted Computing Group (TCG) is a not-for-profit organization that was formed in 2003 to develop, define, and promote open standards for hardware-enabled trusted computing and security technologies across multiple platforms, peripherals, and devices. The membership includes some of the world's more recognizable brand names; emerging leaders; and successful vendors and developers of components, software, systems, and network and infrastructure. These companies and other organizations have joined forces to develop, define, promote, and approve open, accessible standards for trusted computing and security technologies.

Trusted Network Connect (TNC) is both a TCG Work Group and a TCG eponymous open standard and architecture for NAC and network security. Many of TCG's membership actively participate in the definition and specification of the TNC's open NAC standards and architecture.

The TNC Work Group has created an open, standards-based set of standards and architecture for device authentication and platform integrity measurement, which is a foundation for developing open-architected, standards-driven, interoperable NAC solutions. The TNC architecture ...