What Problems Does Password Manager Pro Solve?
Administrative/Privileged passwords are literally aplenty in enterprises. Servers, databases, switches, routers, firewalls and any other hardware or
software, could have equally large number of administrative passwords. These passwords are insecurely stored in spreadsheets, text files and even as
printouts and are shared by a group of administrators.
This traditional practice brings with it a host of issues such as:
- Insecure storage of passwords inviting security threats
- Uncontrolled super-user privileges
- No role-based access control; internal controls become fragile
- Lack of accountability for actions
- No provision for enforcing standard password practices/policies
- No centralized control
Password Manager pro solves all these problems by providing a secure system to store, administer, and share passwords.
Highlights & Features of Password Manager Pro
Centralized Password Vault
 |
Store all your enterprise passwords - privileged accounts, shared accounts, firewall accounts and others in the secure, centralized repository |
|
Shared Admin Password Management
 |
Securely manage shared accounts such as 'Administrator' on Windows, 'root' on Unix/Linux, 'enable' on Cisco, 'sa' on SQL and others |
|
|
App-to-App Password Management
 |
Any application or script can query PMP and retrieve passwords to connect with other applications or databases, eliminating hard-coded passwords |
|
Active Directory / LDAP Integration
 |
Import users / user groups from Windows Active Directory or LDAP and also leverage the authentication mechanism |
|
|
Password Ownership & Sharing
 |
Well-defined ownership for the passwords stored in the centralized vault. Provision for selective sharing of passwords on need basis |
|
Role-based Access Control
 |
Fine-grained restrictions on managing resources and passwords stored in PMP. Restrictions are enforced based on pre-defined user roles |
|
|
Password Access Control Workflow
 |
Request-release controls for password retrieval. Provision for granting time-limited access, exclusive privilege and concurrency controls |
|
Automatic Login to Target Systems, Websites
 |
Automatically log on to the target systems, websites and applications directly from the PMP web interface without copying and pasting of passwords |
|
|
Automated Password Resets
 |
Reset the passwords of remote resources from Password Manager Pro web-interface as and when required or automatically through scheduled tasks |
|
Real-time Notifications on Password Events
 |
Email notifications on the occurrence of password events such as retrieval, reset, expiry, policy violations, changes in sharing and other events |
|
|
Comprehensive Audit Trails & Reporting
 |
Complete record of 'who', 'what' and 'when' of password access. Intuitive reports on entire password management scenario in your enterprise |
|
PCI DSS Compliance Reporting
 |
Reports on the violations with respect to the use and management of privileged passwords based on the requirements of PCI-DSS. |
|
|
Two-Factor Authentication
 |
Enforcing two successive stages of authentication for logging in to PMP. Usual authentication is the first stage. Various options provided for the second stage
|
|
High Availability Architecture
 |
Uninterrupted access to enterprise passwords through the deployment of redundant server and database instances |
|
PCI DSS Compliance Reporting
Payment Card Industry Data Security Standard (PCI DSS)
With e-commerce on the rise, there have been numerous financial transactions made online, many of which involve
making credit card payments for purchases. This increase in online payments has subsequently resulted in the growth of
cases involving credit card fraud. Card numbers and card holder data are sensitive information which need utmost
protection so that misuse is prevented and information is secured.
Therefore as a strategic security measure, companies & vendors handling credit and debit card information now need to comply with stringent security standards drawn by major
credit card companies like VISA, MasterCard, American Express etc. so that security breaches are prevented and
card holder data is safeguarded. The standard to be followed is a set of security requirements known as the Payment Card
Industry Data Security Standard (PCI DSS) and applies to all members, merchants and service providers that store, process
or transmit cardholder data regardless of transaction type (point of sale, phone, e-commerce, etc.).
What is the PCI DSS ?
The PCI DSS stands for Payment Card Industry Data Security Standard. It is a multifaceted security standard
that includes requirements for security management, policies, procedures, network architecture, software design
and other critical protective measures. It represents a set of rules that need to be adhered to by businesses that
process credit cardholder information, to ensure data is protected. The PCI Data Security Standard comprise 12
general requirements designed to:
- Build and maintain a secure network
- Protect cardholder data
- Ensure the maintenance of vulnerability management programs
- Implement strong access control measures
- Regularly monitor and test networks
- Ensure the maintenance of information security policies
This standard is governed by PCI Security Standards Council https://www.pcisecuritystandards.org/
Why should you comply to PCI DSS ?
Organizations that store and handle credit card information of their customers, irrespective of their size
and nature of business, are always at a high risk of cardholder data misappropriation by criminals and other
sources with malicious intent. Such security breaches will result in fines levied by credit card companies, litigations
and loss in trust, and eventually business. Credit card companies levy huge fines up to $500,000 if businesses fail
to comply to the PCI DSS. Companies also run the risk of not being allowed to handle cardholder data if found
non-compliant and having lost data. As a result, achieving PCI DSS Compliance is top priority for such companies.
How does Password Manager Pro fit in?
PMP reports the violations in your network from the requirements of Payment Card
Industry (PCI) Data Security Standard (DSS), relevant to the use and management practices of shared administrative,
software and service account passwords of various systems. PCI DSS requirements 2,3,7,8,10 & 12 are covered in this report.
You have the option to generate separate compliance reports for each PCI DSS requirement 2,3,7,8,10 & 12. You can also generate a consolidated PCI DSS report too.
Password Manager Pro has proved to be a reliable Password Management Solution for many enterprises in different spheres ranging from Manufacturing, Healthcare, Banking, Finance, Insurance, Professional Services to Universities and Law firms. Following is the partial list of PMP customers ...
|
IT Solution/Service Provider/On-Demand Services
- ALL-TLD GmbH
- Applied Security
- Bitmovers
- Business Vitals
- Crisp Thinking
- Crossroads Technologies
- Crox Development
- CustomCD.us
- Daptiv, Inc
- Euronet Worldwide
- EMC Corporation
- Manx Telecom Ltd
- Microgear
- Nova
- Ofiwex
- OnRamp Access
- PC-Ware Information Technologies B.V.
- Pragmatix, Inc
- Riege Software International
- Silver Spring Networks
- Tekmotiv
- The Data Center Inc.
- Webroot Software, Inc.
- WebSense
Healthcare
- Association of American Medical Colleges
- Arbonne International LLC
- Burnham Medical Research Institute
- Correctional Medical Services, Inc
- Centene Corporation
- Hallmark Services Corp
- Maria Parham Hospital
- McKesson Canada
- Medtronic
- Metropolitan Health Networks, Inc
- Micromet AG
- MTBC
- National Institute of Allergy and Infectious Diseases
- Salem Hospital Regional Health Services
- Standard Process Inc.
- StayWell
- Transcend Services, Inc.
- The CDM Group, Inc
- Wyeth Organics
Automation/Manufacturing
- Juno Lighting, Inc.
- KUKA Toledo Production Operations LLC
- Pepperl+Fuchs
- TI Group Automotive Systems
Professional Services/ Business Solutions
- Aurecon Australia Pty Ltd
- AussieHQ Pty Ltd
- Ernst & Young
- Remhard ICT
- Veda Advantage
Research Tools
- Cell Signaling Technology, Inc.
- Sigma-Aldrich Co
Construction
- Black & McDonald
- Implenia AG
Electronics
- Creative Electronic Systems
Government Agencies
- Dept of Homeland Security
- Lawrence Berkeley National Laboratory
- Lawrence Livermore National Laboratory
- National Credit Union Administration
- National Institutes of Health
- NASA
- National Institute of Standards and Technology
- Peace Corps
- State Bar of California
- US Department of Veterans Affairs
- US Dept of Justice
- US Dept of interior
- US Courts
- US Antarctic Program
Wireless Technologies
|
Banking/Finance/Insurance
- Austria Cards
- Bank of America Securities Prime Brokerage
- Citizens & Northern Bank
- Complinet
- Consumer Credit Counseling Service of Greater Atlanta
- Dwight Asset Management Company LLC
- Fallon Community Health Plan
- Federale Assurance
- First State Investments
- Fortis Clearing Americas, LLC
- Irish Stock Exchange
- M Financial Group
- Mission Federal Credit Union
- MGIC (Mortgage Guaranty Insurance Corporation)
- Pacific Pay Systems
- Pinnacle Financial Group
- RIAS-UK
- Royal London
- Sandler O’Neill + Partners, L.P
- Silver Point Capital, L.P.
- The South Financial Group
- Thomson Financials
- Towry Law
Law Firms/Attorneys
- Claimant Management Systems, LLC
- Stinson Morrison Hecker LLP
Universities/ Educational Institutions/ Educational Software
- Australian Catholic University
- Blackboard Inc
- Bowdoin College, Brunswick, Maine
- Kern Community College District
- Michigan Technological University
- Monash University Library
- Norwich University
- Nova Central School District
- Phillips Academy Andover
- The College of New Jersey
- The Graduate Institute
- The Johns Hopkins University Press
Entertainment / Sports / Fitness / Graphics
- Adidas Group
- Casino Del Sol
- Crown Ltd
- Gracenote
- PBM Graphics
- Roamfree
- Sony Pictures - Imageworks
- TCA Holdings, LLC
- The Hong Kong Jockey Club
- Video Gaming Technologies
Defence, Aerospace, Aeronautics
- BAE Systems
- NASA Glenn Research Center
Energy Solutions
- Chevron
- P2 Energy Solutions Inc.
- Powder River Energy Corporation
- Refron Inc.
Oil & Gas
Service Organizations
- ELCA Board of Pensions
- VistaCare
Power Transmission
Media
Stores/ Shopping
Consumer Products/Goods Supplier
- Fibertex A/S
- Gucci
- Leggett & Platt
- Sara Lee Information Centre of Excellence
- TricorBraun
|
Password Manager Pro Datasheets