Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

An Activesync IT administrator has the ability to choose if the phone should require a password, and also how complex it should be.

Since the fingerprint scanner appears to replace the traditional password screen, how does that affect an Exchange-connected phone with traditional password policies?

share|improve this question
add comment

1 Answer

The Exchange ActiveSync Policy Engine gives administrators the option to allow biometrics. See http://technet.microsoft.com/en-us/library/dn282287.aspx for details.

In addition, it seems almost certain that using a PIN code or passphrase instead of biometrics will remain an option. It turns out that you must set at least a PIN when using TouchID. When you reboot, or have not unlocked the phone for 48 hours, the phone requires the PIN to unlock. See http://blogs.wsj.com/digits/2013/09/11/apple-new-iphone-not-storing-fingerprints-doesnt-like-sweat/

share|improve this answer
    
Also Ben Thompson makes the interesting point that if Apple allow you to have both PIN and TouchID enabled at the same time, you get 2-factor. See stratechery.com/2013/thinking-about-iphone-pricing –  Graham Hill Sep 11 '13 at 12:00
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.