Deployment, hosting, and identity integrations
Analog Informatics Corporation (AIC) software does not depend on the platform it is hosted on. The AIC Server runs on Windows, Linux, and Apple macOS. It runs on physical servers, in virtual machines, in containers, and in the cloud. It runs on Security Technical Implementation Guide (STIG) hardened images and on standard images. It signs users in with its own identity and role-based access control (RBAC) system, or with the directory the organization already uses.
Which operating systems can host the AIC Server?
The AIC Server runs on Microsoft Windows and Windows Server, on Linux, and on Apple macOS. It runs on STIG-hardened images and on standard images, so an organization can host it on the same hardened build it already uses for other servers.
Which virtual environments does AIC support?
AIC runs in the virtual environments organizations commonly use:
| Type | Environments |
|---|---|
| Hypervisors | Microsoft Hyper-V, VMware vSphere and ESXi, Proxmox Virtual Environment (VE), Kernel-based Virtual Machine (KVM) with QEMU, Nutanix AHV, and XenServer |
| Cloud virtual machines | Microsoft Azure Virtual Machines, Amazon Elastic Compute Cloud (EC2), Google Compute Engine, and Oracle Cloud Infrastructure (OCI) Compute |
| Containers | Docker and Podman |
| Container orchestration | Kubernetes, including Azure Kubernetes Service (AKS), Amazon Elastic Kubernetes Service (EKS), Google Kubernetes Engine (GKE), and Red Hat OpenShift |
| Desktop hypervisors for evaluation | VMware Workstation and Oracle VirtualBox |
The same kits can also power idle virtual workstations off on a schedule. See VM power scheduling.
Where can I buy AIC in the cloud?
Microsoft Azure Commercial Marketplace is the initial launch partner for AIC CMMC Complete™. All current kits (Level 1, Level 2, and Level 3) are available now on that marketplace. The kit launches into the organization's own Azure subscription. Microsoft bills Azure usage.
Available now
| Option | Status |
|---|---|
| AIC CMMC Complete™ Level 1, Level 2, and Level 3 on the Microsoft Azure Commercial Marketplace (initial CMMC launch partner) | Available now |
| Customer installation on any cloud the organization uses, in its own subscription or account, including Windows and Linux virtual machines on Microsoft Azure, Amazon Web Services, Google Cloud, and Oracle Cloud Infrastructure | Available now |
Planned
| Option | Status |
|---|---|
| Amazon Web Services (AWS) Marketplace | Planned, based on customer demand |
| Google Cloud Marketplace | Planned, based on customer demand |
| Oracle Cloud Marketplace | Planned, based on customer demand |
| Exostar and other marketplaces | Planned, based on customer demand |
| Government Community Cloud (GCC) environment support across cloud platforms, including Microsoft Azure Government | Planned, with implementation roadmaps based on customer demand |
| Federal Risk and Authorization Management Program (FedRAMP) environment support across cloud platforms | Planned, with implementation roadmaps based on customer demand |
How does AIC run in the cloud for CMMC?
For Cybersecurity Maturity Model Certification (CMMC) customers, AIC runs in the cloud as customer-controlled infrastructure. The enclave launches into the organization's own cloud subscription. The organization holds the keys, the identities, and the access rules. That design is meant to give organizations an easier path to CMMC Level 2 and Level 3. The assessor decides the assessment outcome. See Secure enclaves and AIC CMMC Complete™.
Which identity systems does AIC work with?
Small and midsize businesses and CMMC enclaves can use the identity and RBAC system built into AIC. Organizations that already have a directory can sign in with it.
| Identity system | How AIC connects | Status |
|---|---|---|
| Built-in identity and role-based access control (RBAC) | Local accounts, roles, and multifactor authentication (MFA) | Available now |
| Microsoft Active Directory | Lightweight Directory Access Protocol (LDAP) sign-in, and Windows Integrated (Kerberos) sign-on | Available now |
| Microsoft Entra ID (formerly Azure Active Directory) | OpenID Connect (OIDC) | Available now |
| Okta | OpenID Connect | Available now |
| Ping Identity and other OpenID Connect providers | OpenID Connect | Available now |
| OAuth 2.0 and OpenID Connect federation | Standard OAuth 2.0 and OpenID Connect sign-in | Available now |
| Security Assertion Markup Language (SAML) 2.0 federation | SAML 2.0 single sign-on with any SAML 2.0 identity provider, including Microsoft Entra ID, Okta, Ping Identity, and Active Directory Federation Services (AD FS) | Available now |
See Conditional access and threat defense for sign-in rules by country, network address, threat intelligence, and MFA.
What is AIC written in?
AIC software is written in the Rust programming language. It contains no .NET, ASP.NET, or Java code, and no legacy C or C++ application code. The default cryptographic library is AWS-LC, which holds a Federal Information Processing Standards (FIPS) 140-3 certificate. See Key management.
Is AIC open source?
No. AIC is commercial software. It is not an open source product.
- Some integrations use open source components under permissive licenses such as the MIT License and the Apache License 2.0. Every component and its license text are listed in the console under Help, About, Open source credits.
- AIC does not build code under the GNU General Public License (GPL) into its software. When an organization chooses to use a GPL tool with AIC, the organization installs that tool, and AIC runs it as a separate program.
- AIC contributes money and engineering work to the open source community.
Screenshots
More on Product screenshots.
Platforms and integrations
Runs on
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.
Connects to
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.
Cloud platforms
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.
Operating systems
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.
Hypervisors and containers
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.
Security information and event management
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.
Ticket systems
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.
Identity systems
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.
Planned marketplace support
Google Cloud, Amazon Web Services, Oracle Cloud, and Exostar marketplace listings are planned, based on customer demand. Customer installation on any cloud is available now.
All logos and trademarks are the property of their respective owners. Their use does not imply endorsement.