password manager faq hipm admin
Post on 06-Apr-2018
226 Views
Preview:
TRANSCRIPT
-
8/3/2019 Password Manager Faq Hipm Admin
1/4
Hitachi ID Password Manager
Frequently Asked Questions
forPassword ManagerAdministrators
2014 Hitachi ID Systems, Inc. All rights reserved.
http://hitachi.com/http://hitachi-id.com/ -
8/3/2019 Password Manager Faq Hipm Admin
2/4
Contents
1 How do I reset the superuser application IDs password? 1
2 Where doesHitachi ID Password Managerstore Q&A data? 1
3 How do I write reports that directly query theHitachi ID Password Managerdatabase? 1
i
-
8/3/2019 Password Manager Faq Hipm Admin
3/4
Frequently Asked Questions for Password ManagerAdministrators
1 How do I reset the superuser application IDs password?
In the event that the Hitachi ID Password Manageradministrator forgets his own application password intoPassword Manager, Password Manager comes with the ADM_SET utility that allows a user with an ad-ministrative console login on the Password Manager server to reset the Password Managerapplicationadministrator password. This program can also be used to unlock/enable a superuser ID. ADM_SET is onlyaccessible from an administrative command prompt on thePassword Managerserver.
2 Where does Password Manager store Q&A data?
Hitachi ID Password Managernormally stores security questions, used to authenticate users who forgettheir passwords, in its internal identity cache. The questions and answers are encrypted using 128-bit AESusing a secret key. Alternatively, Password Managercan be tied to an external repository (e.g., LDAP, AD,Oracle, etc.) where it reads and writes security questions and login ID profiles.
3 How do I write reports that directly query the Password Manager
database?
Hitachi ID Password Manager stores data using an embedded database engine, which acts both as anidentity cache (managing a rolling snapshot of information about users drawn from target systems) and asa place to store configuration information and persistent user data, such as password history.
The identity cache is local to the Password Managerserver, which makes the user interface much moreresponsive. It is not authoritative for user profile data, as data is refreshed from target systems regularlyand automatically (typically every night).
The following data is stored inPassword Manager:
User profiles:
User ID, name (plaintext)
Login IDs attaching users to target systems (plaintext)
Password history (Hashed, salted old passwords)
Authentication profile (Optional. If stored, encrypted using 128-bit AES and a server-designated128-bit key.)
2014 Hitachi ID Systems, Inc.. All r ights reserved. 1
-
8/3/2019 Password Manager Faq Hipm Admin
4/4
Frequently Asked Questions forHitachi ID Password ManagerAdministrators
System configuration:
Target system information
Target system login credentials (encrypted: 128-bit AES and a server-designated 128-bit key)
Password policy rules
List of events that should be intercepted and trigger outbound integration with systems such asBMC/Remedy ARS
Various other configuration data
System event logs capturing historical events, including:
Requesting user.
Target/recipient user.
Target system involved, if any.
Operation.
Time/date.
Result code and message.
These logs are typically retained indefinitely, for reporting purposes.
Password Managercomes with various built-in reports that can be generated through the web interface. Toaccess these reports:
1. Log in as an admin user who has the right to view the server monitor.
2. ClickServer Monitor Run Reportsto see thePassword ManagerRun Reportspage.
3. Click on the type of report you want to generate.
Additionally, if custom reports need to be created, then the database files can be copied to another location.This will allow another tool to read the database and allow you to generate custom reports.
ww.Hitachi-ID.com
0, 1401 - 1 Street SE, Calgary AB Canada T2G 2J3 Tel: 1.403.233.0740 Fax: 1.403.233.0725 E-Mail: sales@Hitachi-ID.com
File: / pub/ wp/ documents/ faq/ hipm/ faq_psynch_admin.texDate: 2004-04-29
http://hitachi-id.com/http://hitachi-id.com/http://hitachi-id.com/http://hitachi-id.com/
top related