Font License for Symantec Advanced Authentication Component

Products

• CA Strong Authentication
• CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)
• CA Advanced Authentication
• CA Risk Authentication

Issue/Introduction

We have received an email from https://www.monotype.com/ claiming that we are using their fonts on our Access Management portal without a direct license.

In Symantec Adapter component, the font "ca_sans-regular-webfont.woff" is referenced in the style-sheet file "arcot-enrollment.css" as follows:
 
@font-face {
    font-family: 'CASansRegular';
    src: url('../fonts/ca_sans-regular-webfont.eot');
    src: url('../fonts/ca_sans-regular-webfont.eot?#iefix') format('embedded-opentype'),
         url('../fonts/ca_sans-regular-webfont.woff') format('woff'),
         url('../fonts/ca_sans-regular-webfont.ttf') format('truetype'),
         url('../fonts/ca_sans-regular-webfont.svg#CASansRegular') format('svg');
    font-weight: normal;
    font-style: normal;
}
 
To use these fonts, please check if you have purchased a related license.

Environment

Release : 9.1 SP4

Symantec Adapter component of Advanced Authentication

Resolution

Broadcom engineering team has reviewed and confirmed that Advanced Authentication product is using the paid font ("ca_sans-regular-webfont.woff") from monotype.com in the adapter components like AFMwizard, arcotafm, arcotsm and adapter sample apps.

Couple of years ago, Advanced Authentication did an exercise to remove the paid fonts from other components and after that stopped the license renewal for the fonts from monotype.com. The Adapter component was not a part of this exercise.

Broadcom Product Management is working with monotype.com to resolve any license issue. The end customer of the Advanced Authentication product doesn't have to worry about working with 3rd party vendors directly. Broadcom teams will handle the issue and inform the respective customers post the resolution.