SanDisk Offers RSA SecurID® Two-Factor Authentication Technology Stored in Secure USB Flash Drives, Managed by SanDisk CMC Software

Business Wire, April 7, 2008

"Two-For-One" Solution Provides Integrated Secure Data Storage And Two-Factor Authentication Technology From RSA In SanDisk Cruzer Enterprise Flash Drives

MILPITAS, Calif. -- SanDisk Corporation (NASDAQ:SNDK) today announced the ability to deploy, store and use RSA SecurID([R]) software tokens from RSA, The Security Division of EMC, on SanDisk Cruzer([R]) Enterprise USB flash drives. Now available for order, this "two-for-one" solution gives users a single device for secure data storage and two-factor authentication, an alternative to carrying both a flash drive and a separate hardware authenticator.

Cruzer Enterprise is managed by SanDisk's CMC (Central Management & Control) server software, making it easy for IT managers to provision and monitor flash drives throughout their lifecycle. At the same time, Cruzer Enterprise flash drives that contain RSA SecurID software tokens provide two-factor authentication capabilities for remote and mobile network access - requiring something users have (the one-time passcode generated on the drive, used with or without a PIN) and something users know (the drive's password).

"This is an ideal solution for employees who need to travel light and yet be fully connected, as well as for IT departments concerned with data security and regulatory compliance challenges," said Roy Ramati, Vice President and General Manager of the Enterprise Division at SanDisk. "Adding RSA SecurID to our management and security solutions for the enterprise is a major step forward in our mission: providing IT professionals with tools to enhance employee productivity through mobility and remote connectivity."

SanDisk has certified interoperability between Cruzer Enterprise Flash Drives and RSA SecurID technology through the RSA Secured([R]) Partner Program, which enables interoperability partners to embed RSA technology within their products and solutions. The RSA Secured program includes a formalized certification process that puts each product through a series of tests to ensure that the end-user is getting the maximum available benefits from an interoperable solution.

"Two-factor authentication is no longer a one-size fits all solution, so we are working with SanDisk to optimize our joint customers' deployments by balancing risk, cost and convenience and offering a broad choice of authentication mechanisms," said Sam Curry, Vice President of Product Management and Product Marketing, Identity and Access Assurance Group at RSA, the Security Division of EMC. "By leveraging a single device to support additional security capabilities, we are building the necessary confidence that corporate data is being accessed securely by customers, partners and employees."

SanDisk Cruzer Enterprise flash drives protect all files with advanced hardware-based 256-bit AES encryption. Users are also required to create a complex password during the set-up process. The combination of encryption and password protection makes it extremely difficult for unauthorized users to access data if the drive is lost or stolen. Cruzer Enterprise - available in 1, 2, 4 and 8 gigabyte (GB)1 capacities - is also fast, with read speed of 24 megabytes (MB) per second and write speed of 20 MB/sec2.

CMC server software provides lifecycle management for Cruzer Enterprise drives, including centralized provisioning of drives throughout the organization, password recovery and renewal through the network, central back-up and restore, central usage tracking, and remote termination of lost drives. This means data is not lost when a drive is lost, and IT administrators can provision a replacement flash drive with user files stored on the network.

CMC is also capable of working with RSA Authentication Manager to remotely provision software token seeds and, if necessary, the RSA SecurID application itself to remote employees - reducing the cost of deployment.

SanDisk Cruzer Enterprise drives with pre-installed RSA SecurID software tokens, as well as CMC software with a module to support RSA SecurID two-factor authentication, are available for order now from SanDisk and SanDisk-authorized resellers. Cruzer Enterprise drives can securely store RSA SecurID software token seeds, available for purchase and enablement from RSA or its channel partners, to generate one-time passwords directly from the drive.

SanDisk, a global leader in USB flash drives, is driving the convergence of secure portable storage, identity management and virtualization through its Enterprise Division to create a comprehensive solution for mobile professionals in enterprises and government agencies. Today, SanDisk's Enterprise Division offers solutions for more securely storing and managing enterprise data, within and outside the enterprise environment. With the upcoming introduction of virtualization and identity and access management capabilities, SanDisk expects to allow IT managers to boost employee productivity by mobilizing the corporate computing environment through flexible, secure solutions that also reduce total cost of ownership. More information is available at www.sandisk.com/enterprise.>