Verify FDCC Compliance

Proving compliance to FDCC is a breeze with SignaCert Verify ^TM. Simply download the light-weight, non-persistent client and run it on desktops for which you need to prove compliance. The client scans the device and compares results with the published reference, proving compliance or indicating deviations that must be fixed to bring them into compliance.

Benefits

• Definitively prove devices are in compliance
• Identify which aren’t and get details about specific deviations
• Automate a time-consuming and error-prone process
• An independent control process that speeds efforts to achieve compliance
  

Verification Process

Verification is a simple process of comparing what is actually found on a desktop machine with the published specification for that device (Windows XP or Vista).

The currently published specification for Windows XP and Vista desktops is stored for comparison. The Verify client is downloaded and run on the desktops that require compliance auditing. The client scans the paths used by Windows XP or Vista and inventories items found there by computing a cryptographic hash. The actual configuration is represented as an XML file containing cryptographic hashes and metadata about where they were found. This file is compared with the published spec to reveal any deviations. The specific details are returned to the client which renders them as a report. The results can show that a device is in compliance-an exact match, or that it has deviations.

Deviations

SignaCert Verify will return a list of deviations for desktops that don't comply. Deviations take one of three forms and any combination of deviations can be found. The table lists the remediation action required for the specific deviation.