Lieberman Software Random Password Manager & Two-Factor Authentication

Random Password Manager Periodically randomizes local administrator and root account passwords throughout the enterprise, including firecall accounts. Enables delegated remote recovery of current local passwords on demand. Multi-threaded, SQL server-based application that deploys without installing agents to clients. Supports Windows NT, 2000, XP, Server 2003, Vista, Server 2008, Linux, UNIX, SQL Server, Oracle, Juniper, Cisco IOS accounts.

Problem Credentials compromised via Shoulder surfing Key loggers Social engineering

Solution: RSA SecurID Integration RSA Secured partnership, providing RSA SecurID two-factor authentication technology. Prevents data from being accessed via key loggers, shoulder surfing, or social engineering. Only staff with physical possession of an RSA SecurID hardware authenticator and properly provisioned credentials can access current passwords.

Secure Identity Management Requires users to identify themselves with two unique factors: –A password or PIN, and –an RSA SecurID authenticator such as a hardware token After both factors are authenticated, users can access password store.

How it works-Accessing Stored Passwords Local access to Random Password Manager is checked against central database to confirm if user is permitted access and if RSA SecurID is required. If so, user enters RSA SecurID passcode – which changes every 60 seconds – and personal PIN into dialog box to achieve access.

Process Overview

Requirements RSA List Library Version 6.1 Random Password Manager 4.01 or later RSA SecureID Authentication Agent installed on the host machine of the Win32 app and the web server(s) hosting the website(s) Agent host record added to the RSA Authentication Manager database; hostname, ip address—agent type is Net OS RSA agent must be capable of successful authentication using the RSA Security Center

Demonstration Win32 app configuration

Demonstration Website configuration

Conclusion Questions? Visit our Forum at Phone: Joe Vachon Sales Engineer