Hitachi ID Password Manager

1 Hitachi ID Password Manager Managing the User Lifecycle Across On-Premises and Cloud-Hosted Applications Integrated Credential Management for Users: Passwords, encryption keys, tokens, smart cards and more.© 2015 Hitachi ID Systems, Inc. All rights reserved. 1

Slide Presentation2 HiPM Animated Demonstration The following animations illustrate core Hitachi ID Password Manager user interfaces and processes:• Security question enrollment: • SSPR with GINA Extension: – A user authenticates and – A locked out user resolves his own completes his personal profile of problem, from the login prompt, questions and answers. using a GINA extension.• Alias enrollment: • SSPR with Vista credential provider: – A user attaches non-standard login – A locked out user resolves his own IDs to his profile. problem, from the login prompt, using a Windows Vista credential• Password expiration: provider. – A user is invited, via e-mail, to • Assisted password reset: change soon-to-expire passwords. – A help desk analyst signs in with an• Self-service password reset (SSPR) RSA SecurID token and resets a using Secure Kiosk Account: caller’s password. – A locked out user resolves his own • PIN Reset for an RSA SecurID token: problem, from the login prompt, without client software deployment. – A user resets his RSA SecurID token PIN with HiPM.3 Locked out Windows 7 user resets own password Animation: ../../pics/camtasia/v9/hipm-pw-reset-vista-nb/hipm-pw-reset-vista-nb.mp44 Locked out Windows XP user resets own password Animation: ../../pics/camtasia/v8/hipm-pw-reset-gina/hipm-pw-reset-gina.cam© 2015 Hitachi ID Systems, Inc. All rights reserved. 2

Slide Presentation5 Locked out Windows user resets own password (no software foot- print) Animation: ../../pics/camtasia/v8/hipm-pw-reset-ska/hipm-pw-reset-ska.cam6 Enrollment of security questions Animation: ../../pics/camtasia/v9/hipm-qa-enrollment/hipm-qa-enrollment.mp47 Enrollment of non-standard login IDs Animation: ../../pics/camtasia/v82/hipm-alias-enrollment/hipm-alias-enrollment.cam8 RSA SecurID Self Service Token Support Animation: ../../pics/camtasia/v82/hipm-rsa-token-reset/hipm-rsa-token-reset.cam9 Reminder to change passwords Animation: ../../pics/camtasia/v9/hipm-pw-expired-email/hipm-pw-expired-email.mp4© 2015 Hitachi ID Systems, Inc. All rights reserved. 3

Slide Presentation10 Assisted Password Reset Animation: ../../pics/camtasia/v9/hipm-assisted-pw-reset/hipm-assisted-pw-reset.mp411 Unlocking Windows UsersApproach Pros ConsDo nothing (call help desk). Zero setup. Zero benefit.Domain secure kiosk account. Easy setup. No client Generic, no password domain software. account.Personalized SKA accounts. No \"guest\" domain account. Lots of specialized domain accounts.Local secure kiosk account. No \"guest\" domain account. Client software deployment.GINA wrapper DLL; Vista More user friendly. Risk of workstation damage ifCredential Provider improperly installed.Local software + dedicated Enables password reset for Client package, at least toVPN. mobile or at-home users who mobile. are locked out.IVR access. Simple setup, no client Cannot manage local software. passwords. Users don’t want to talk to a machine. © 2015 Hitachi ID Systems, Inc. All rights reserved. 4

Slide Presentation12 HiPM Benefits Improved Security Cost Savings Synchronization: Eliminates 60% to Policy: Enforce 50+ Self-service reset: 90% of password Synchronization: password rules, problems. Authentication: globally. Assisted reset: Delegation: PIN reset: When adopted by Accountability: Fewer written 40% to 70% of Encryption: passwords. users, diverts problem resolution Block social away from the help engineering attacks desk. on the help desk. Shortens remaining Eliminate admin password reset HD passwords at help calls by 50% or desk. more, to about 1 minute/call. Log all authentications, Users can resolve password changes. their own SecurID problems. Protect sensitive data on disk and network.13 Summary An integrated solution for managing credentials: • Immediate security benefit: password policy, help desk caller authentication. • Low deployment cost, minimal ongoing investment, significant IT support savings. • Always accessible: – Web browser on PC, phone or tablet. – Windows login prompt. – Pre-boot encryption password prompt. – Phone call / IVR. – Available at work and while off-site. • 110+ connectors included. Learn more at Hitachi-ID.com/Password-Manager500, 1401 - 1 Street SE, Calgary AB Canada T2G 2J3 Tel: 1.403.233.0740 Fax: 1.403.233.0725 E-Mail: [email protected] w.Hitachi-ID.com Date: May 22, 2015 File: PRCS:pres