EDCS · Deployment & licensing

Where it runs, and how you buy it.

EDCS is sold as a product, not a custom build: the same software for every customer, configured for your organization, with a license and a support tier you choose.

Deployment

On your servers, or hosted by us.

On your own servers

Your hardware, your authorization

We install EDCS on servers you control, in your data center or your own cloud account, and hand your team the runbook. Your identity data stays on your servers.

Hosted by Curtilage

Nothing to install

We run a dedicated installation for you on commercial servers we operate, and handle upgrades, backups and monitoring. Not a government cloud region; see what is not included below.

Deployment and Operations Guide (PDF) · All product guides

Licensing

A base license plus a seat per person.

The base license covers the installation: the sign-on service, directory, vault, configuration store and admin console. Seats count the people who sign in through it. Hosting, when we host it, and support are priced as separate lines. Prices are on request, and we quote them after a walkthrough so the quote matches what you will run.

Support

Three support tiers.

Every tier includes product updates and security patches. Coverage hours and response targets are written into your support agreement.

Standard

For a team that runs EDCS itself.

  • Product updates and security patches
  • Email and phone support during business hours
  • Installation and upgrade documentation

Priority

For a team that wants us alongside when it changes things.

  • Everything in Standard
  • A named support contact
  • Upgrade planning and a scheduled upgrade window with us on the call
  • Help connecting your applications

Managed

For an organization that wants us to run it.

  • Everything in Priority
  • We operate it: upgrades, backups and monitoring
  • On your servers or hosted by us

Before you rely on it

What is not included.

We would rather you hear these from us than find them later.

  • No government authorization. EDCS has no Federal Risk and Authorization Management Program (FedRAMP) authorization, no Department of Defense (DoD) Impact Level (IL) authorization at any level, including IL5 and IL6, and no Authority to Operate (ATO). On your servers it runs under your authorization.
  • The hosted option is not a government cloud region, and it is not for classified data.
  • We do not certify your compliance with any framework. We describe how EDCS is built and configured; your assessor draws the conclusions.
  • We do not claim validated cryptographic modules under Federal Information Processing Standard (FIPS) 140-3. In FIPS mode, EDCS relies on the validated module of the operating system it runs on, and whether that module holds a validation certificate depends on your platform.
  • The procedure that creates and unlocks the vault’s key-encryption key has not been reviewed for FIPS mode.
  • No capacity guarantee. The performance figures on this page come from one shared workstation-class machine running one instance of each service. No load test has yet run with two instances, past the breaking point, or for as long as 30 minutes. We size each deployment with you.
  • No replication or failover between data centers. Several instances run within one site.
  • The deployment template for a government cloud region has not yet been applied to a cloud account.
  • No connectors to DoD enterprise services yet.
  • No hosted software-as-a-service (SaaS) offering. There is no shared, sign-up-and-go EDCS; the hosted option is a dedicated installation we operate, arranged per engagement.
  • The accessibility conformance report is a draft. It has not yet had a manual pass with screen readers or other assistive technology, and it does not state that EDCS conforms to Section 508 or the Web Content Accessibility Guidelines (WCAG).
  • EDCS runs our own applications today; you would be among the first outside organizations to run it.
  • Capabilities marked “Test installation only” are built and covered by automated tests but are not yet running in our own production. We demonstrate them on a test installation, with test certificates rather than real smart cards.

See EDCS in a walkthrough.

Tell us how your people sign in today and which applications they use. We’ll show you EDCS, scope where it should run, and quote the license and support that fit.