| data | {"usersAndGroups":[{"value":"557058:b7e6171b-97ca-4b93-ac6f-9e29353b4c9a","label":{"key":null,"ref":null,"props":{"user":{"type":"known","accountId":"557058:b7e6171b-97ca-4b93-ac6f-9e29353b4c9a","accountType":"atlassian","email":"","publicName":"Phillip Hanegan","profilePicture":{"path":"/wiki/aa-avatar/557058:b7e6171b-97ca-4b93-ac6f-9e29353b4c9a","width":48,"height":48,"isDefault":false},"displayName":"Phillip Hanegan","isExternalCollaborator":false,"_expandable":{"operations":"","personalSpace":""},"_links":{"self":"https://dotnetworkflow.jira.com/wiki/rest/api/user?accountId=557058:b7e6171b-97ca-4b93-ac6f-9e29353b4c9a","base":"https://dotnetworkflow.jira.com/wiki","context":"/wiki"}}},"_owner":null},"type":"user"}]} |
|---|
| showSelected | true |
|---|
| editorValue | {"editorValue":{"version":1,"type":"doc","content":[{"type":"paragraph","content":[]},{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"type":"text","text":"When EmpowerID is installed, it generates a root certificate authority (CA) that is unique to the environment. This CA is used to issue personal certificates for encrypting and decrypting data that is linked to a person, as well as for using the Privileged Access Management feature of EmpowerID. The first time a user creates a secret or attempts to check out shared credentials, EmpowerID prompts that user to create a new password for encrypting and decrypting their secrets."}]},{"type":"paragraph","content":[{"type":"text","text":"Once the user enters a password, it becomes their master password. EmpowerID uses this master password to generate a public/private key pair certificate for that person, linking the public key to the user and encrypting the private key with the master password using the latest AES-256 bit encryption with PBKDF2 SHA-256 and salted hashes. The master password is then discarded. EmpowerID keeps no record of it to ensure that only the user can retrieve their credentials. Administrators, and the EmpowerID system itself, have no way to do so. "}]}]},{"type":"paragraph","content":[{"type":"text","text":"Privileged Session Management","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"type":"text","text":"Privileged accounts are both a necessity and a liability. These accounts, with their nearly unlimited access to system resources, are essential for everyday IT operations yet abuse of privileged accounts is attributed as the cause of 62% of security breaches. In a Zero Trust model, only the minimum access required should be granted for the minimal time period and if possible, the access should be proxied and monitored."}]},{"type":"paragraph","content":[{"type":"text","text":"EmpowerID’s Privilege Session Manager (PSM) acts as a web-based gateway to provide authorized users with RDP or SSH access to Windows or Linux servers but without exposing the servers to actual network access. This dramatically simplifies network security concerns as both users and servers can be anywhere. The only constraint is access between the user and the web interface of the PSM and between the PSM Gateway and the servers they wish to reach. This eliminates the need for costly VPNs which also slow down the user experience and decrease productivity. This Zero Trust approach prevents most common malware and hack exploits that rely on network connectivity to the servers they are targeting. In addition, strong adaptive identity verification is enforced and sessions can be optionally recorded as videos for later compliance investigation or verification. In all cases, the password of the privileged credential is never revealed to the end-user eliminating the potential for sharing or misuse."}]},{"type":"paragraph","content":[{"type":"text","text":"Local Computer Identity Management","marks":[{"type":"strong"}]}]},{"type":"paragraph","content":[{"type":"text","text":"Attackers frequently target local computer administrator accounts as the first step in order to gain privileged access to an organization’s IT network. Local admin accounts effectively “own the machine” having full access to all local resources including any databases. This access represents a potential audit risk for regulations such as SOX, HIPPA, PCI-DSS, FINMA, MAS, FISMA, and NERC. Local admin accounts can also serve as a stepping stone to a company’s most valuable network data. EmpowerID inventories your servers to discover, monitor, and control local users and groups including local administrators. Role and attribute-based access control policies control membership to the local administrator’s group and allow for access requests through the IT Shop."}]},{"type":"paragraph","content":[{"type":"text","text":"All privileged identities can be assigned to policies that automate the rotation of their passwords. The EmpowerID system through its connectors resets the passwords in the managed system and updates the vaulted information."}]}]}} |
|---|
|