Securing Access to privileged accounts. Hitachi ID Privileged Access Manager secures administrator and service accounts by frequently randomizing passwords. Random passwords are encrypted and stored in a replicated vault. It controls and logs the access of users and applications to privileged accounts. http://hitachi-id.com/privileged-access-manager/

1. ©2013HitachiIDSystems,Inc.Allrightsreserved.
Allothermarks,symbolsandtrademarksarethepropertyoftheirrespectiveowners.
HitachiIDPrivilegedAccessManager hitachi-id.com
Eliminatestaticpasswords
Byfrequentlyrandomizingpasswords,PrivilegedAccessManagerblockspasswordcracking
attacks,passwordsharingandprivilegeretention.
PasswordRandomization
Reliable,fault-tolerantandsecurestorage
Randompasswordsarestoredinanencrypteddatabase.Replicationprotectsagainstdataloss.A
multi-masterarchitectureensureshighavailability,includingintheeventofalocaldisaster.
Encrypted,ReplicatedVault
Operatingsystems,networkdevices,databasesandapplications
PrivilegedAccessManagerincludesconnectorsforover100typesofsystemsandapplications,
morethananycompetingproduct.Itcansecuretheentirenetworkwithminimalcustomization.
ManyBuilt-inConnectors
Eliminatemanualconfigurationofmanagedsystemsandaccounts
Anauto-discoverysystemfindsandclassifiesservers,workstations,servicesandprivileged
accounts.MachinediscoverycanbebasedonAD,LDAP,CSV,DNSoranIPportscan.
Discoveredsystemsareprobedtofindlocalservices,accountsandgroups.Rulesdeterminewhich
discoveredsystemsandaccountstomanageandwhatsecuritypolicytoattach.
InfrastructureAuto-discovery
Eliminatepassworddisplay
Ratherthandisplayingpasswords,PrivilegedAccessmanagercan:
•LaunchRDP,SSHandsimilarsessionsandautomatetheloginprocess.
•Temporarilyattachauthorizeduserstoprivilegedsecuritygroups.
•TemporarilyaddpublickeystoSSHauthorized_keysfiles.
Passwordsarerarelydisplayed,socannotbeshared,retainedorcompromised.
SingleSign-ontoPrivilegedAccounts
Recordadministratorsessionsforaccountabilityandforensicaudits
PrivilegedAccessManagercanbeconfiguredtorecordloginsessionstoprivilegedaccounts.This
includesscreencapture,keylogging,copybuffercaptureandevenwebcamsnapshots.This
systemusesActiveXanddoesnotrequireclientsoftwareinstallationoraproxyserver.Extensive
ACLsandworkflowsprotecttheprivacyofrecordedsessions.
SessionRecording
Manysystemadministratorsadmittowriting
downandsharingprivilegedpasswords.Staff
oftenretainaccesstosensitivesystemsafter
leavinganorganization.Giventime,password
crackingsoftwarecanguessmanystatic
passwords.Weakcontrolsoverpowerful
accountsposeaserioussecurityrisk.
Security
Thereareprivilegedpasswordsoneverysystem,
includingoperatingsystems,databases,network
devicesandapplications.Changingthese
passwordsishardtocoordinateamongevery
userofeverypassword.
Coordination
Challenges
Byfrequentlyrandomizingsensitivepasswords,
HitachiIDPrivilegedAccessManagerprevents
unauthorizedaccessbycurrentandformerusers
andeliminatesthethreatofpasswordcracking.
Auditlogscreateaccountabilitytomonitor
administrativechanges.
KeyBenefits
HitachiIDPrivilegedAccessManagersecuresadministratorandservice
accountsbyfrequentlyrandomizingpasswords.Randompasswordsare
encryptedandstoredinareplicatedvault.Itcontrolsandlogstheaccessof
usersandapplicationstoprivilegedaccounts.
Securingaccesstoprivilegedaccounts.

2. ©2013HitachiIDSystems,Inc.Allrightsreserved.
Allothermarks,symbolsandtrademarksarethepropertyoftheirrespectiveowners.
HitachiIDPrivilegedAccessManager 2
Readthisbrochureonline:
Cisco,Juniper
NetworkDevices
WebExConnect,GoogleApps,Salesforce.com,UltiProHR,Office
365,Cybershift
Cloud/SaaS
API,SSH,Webservice,Browseremulation,Telnet,TN3270,
TN5250,HTTP(S),SQLinjection,LDAPattributesand
command-line
FlexibleAgents
NetworkdevicesandVPNsviaAD,LDAP,SSH
Networking
OracleeBiz,PeopleSoft,SAPR/3,JDEandmore
Application
z/OSwithRACF,TopSecretorACF/2;iSeries;ScriptsforVM/ESA,
Unisys,Siemens,OpenVMS,Tandem
Mainframes/Mini
Linux,Solaris,AIX,HP-UXwithpasswd,shadow,TCB,Kerberos,
NISorNIS+
Unix
Oracle,Sybase,SQLServer,DB2/UDB
Database
Windows,NetWare,Samba,NASappliances
File/Print
Windows/ActiveDirectory,LDAP,eDirectory,NDS
Directory
IncludedConnectors
IncidentManagementIntegrations
Automaticallycreate,updateandcloseticketson:
•AxiosAssyst •BMC/RemedyARS
•BMCSDE •CAUnicenter
•ClarifyeFrontOffice •FrontRangeHEAT
•HPServiceManager •NumaraTrack-IT!
•Symantec/Altiris •TivoliServiceDesk
•ServiceNow•ServiceNow
Additionalintegrationsviae-mail,ODBC,webservicesand
webformsareavailable.
HitachiIDPrivilegedAccessManagerispartoftheHitachi
IDManagementSuite,whichalsoincludes:Password
Managerforself-servicemanagementofauthentication
factorsandIdentityManagerforuserprovisioning.
Formoreinformation,pleasevisit:http://hitachi-id.com/
orcall:1.403.233.0740|1.877.386.0372
Accountabilityandtransparency
Manybuilt-inreportsanswer:
•Whatcomputersareonthenetwork?
•Whichsystemismanagedbywhichadministrator?
•Whohasrequestedone-timeaccess?
•Whosignedintothiscomputer?
•WhichcomputerswereunresponsiveduringthepastNdays?
Reports
Determinewhocanconnecttoeachaccount
Securityofficerssetpolicytolinkgroupsofuserstogroupsofprivilegedaccountsandsystems.
AccessControlPolicyEngine
Rapidemergencyresponseandworkflowflexibility
Apowerfulworkflowengineallowsuserstorequestone-timeaccesstoprivilegedaccounts.Access
issubjecttopolicy--whocanask,whomustapprove.E-mailinvitesauthorizerstovisitasecure
webformandapproveorrejectrequests.
WorkflowRequests,Approvals
SeamlessintegrationwithWindowsserviceinfrastructure
AutomaticallynotifiesWindowsServiceControlManager,Scheduler,IISandothercomponentsof
newpasswords.
RandomizeServiceAccountPasswords
Eliminatesstatic,embeddedpasswords
AnAPI,authenticatedwithauserID,aone-timepasswordandanIPsubneteliminatesstatic
passwordsembeddedinapplications.
WebServicesAPI
Secureaccesstomobiledevices
ClientsoftwareforWindowsandLinuxlaptopsallowsPrivilegedAccessManagertosecure
passwordsonmobiledevicesthatarefrequentlydisconnectedorpowereddown.
LaptopSupportwithaLocalService