1 Hitachi ID Password Manager

Managing the User Lifecycle

Across On-Premises and
Cloud-Hosted Applications

Integrated Credential Management for Users:

Passwords, encryption keys, tokens, smart cards and more.

2015 Hitachi ID Systems, Inc. All rights reserved. 1

 Slide Presentation

2 HiPM Animated Demonstration

The following animations illustrate core Hitachi ID Password Manager user interfaces and processes:

Security question enrollment: SSPR with GINA Extension:

A user authenticates and A locked out user resolves his own
completes his personal profile of problem, from the login prompt,
questions and answers. using a GINA extension.
Alias enrollment: SSPR with Vista credential provider:

A user attaches non-standard login
IDs to his profile.
Password expiration:
A user is invited, via e-mail, to
change soon-to-expire passwords.
Self-service password reset (SSPR)
using Secure Kiosk Account:
A locked out user resolves his own
problem, from the login prompt,
without client software deployment.
A locked out user resolves his own
problem, from the login prompt,
using a Windows Vista credential
provider.
Assisted password reset:
A help desk analyst signs in with an
RSA SecurID token and resets a
callers password.
PIN Reset for an RSA SecurID token:
A user resets his RSA SecurID
token PIN with HiPM.

3 Locked out Windows 7 user resets own password

Animation: ../../pics/camtasia/v9/hipm-pw-reset-vista-nb/hipm-pw-reset-vista-nb.mp4

4 Locked out Windows XP user resets own password

Animation: ../../pics/camtasia/v8/hipm-pw-reset-gina/hipm-pw-reset-gina.cam

2015 Hitachi ID Systems, Inc. All rights reserved. 2

 Slide Presentation

5 Locked out Windows user resets own password (no software foot-
print)

Animation: ../../pics/camtasia/v8/hipm-pw-reset-ska/hipm-pw-reset-ska.cam

6 Enrollment of security questions

Animation: ../../pics/camtasia/v9/hipm-qa-enrollment/hipm-qa-enrollment.mp4

7 Enrollment of non-standard login IDs

Animation: ../../pics/camtasia/v82/hipm-alias-enrollment/hipm-alias-enrollment.cam

8 RSA SecurID Self Service Token Support

Animation: ../../pics/camtasia/v82/hipm-rsa-token-reset/hipm-rsa-token-reset.cam

9 Reminder to change passwords

Animation: ../../pics/camtasia/v9/hipm-pw-expired-email/hipm-pw-expired-email.mp4

2015 Hitachi ID Systems, Inc. All rights reserved. 3


10 Assisted Password Reset
Animation: ../../pics/camtasia/v9/hipm-assisted-pw-reset/hipm-assisted-pw-reset.mp4
11 Unlocking Windows Users
Approach
Do nothing (call help desk).
Domain secure kiosk account.
Personalized SKA accounts.
Local secure kiosk account.
GINA wrapper DLL; Vista
Credential Provider
Local software + dedicated
VPN.
IVR access.
Pros
Zero setup.
Easy setup. No client
software.
No "guest" domain account.
No "guest" domain account.
More user friendly.
Enables password reset for
mobile or at-home users who
are locked out.
Simple setup, no client
software.
2015 Hitachi ID Systems, Inc. All rights reserved.
Slide Presentation
Cons
Zero benefit.
Generic, no password domain
account.
Lots of specialized domain
accounts.
Client software deployment.
Risk of workstation damage if
improperly installed.
Client package, at least to
mobile.
Cannot manage local
passwords. Users dont want
to talk to a machine.
4
 Slide Presentation

12 HiPM Benefits
Cost Savings Improved Security

Synchronization: Eliminates 60% to Policy: Enforce 50+

Self-service reset:
Assisted reset:
PIN reset:
90% of password password rules,
problems. globally.
When adopted by Synchronization: Fewer written
40% to 70% of passwords.
users, diverts Authentication: Block social
problem resolution engineering attacks
away from the help on the help desk.
desk. Delegation: Eliminate admin
Shortens remaining passwords at help
password reset HD desk.
calls by 50% or Accountability: Log all
more, to about 1 authentications,
minute/call. password changes.
Users can resolve Encryption: Protect sensitive
their own SecurID data on disk and
problems. network.

13 Summary
An integrated solution for managing credentials:
Immediate security benefit: password policy, help desk caller authentication.
Low deployment cost, minimal ongoing investment, significant IT support savings.
Always accessible:
Web browser on PC, phone or tablet.
Windows login prompt.
Pre-boot encryption password prompt.
Phone call / IVR.
Available at work and while off-site.
110+ connectors included.

Learn more at Hitachi-ID.com/Password-Manager

500, 1401 - 1 Street SE, Calgary AB Canada T2G 2J3 Tel: 1.403.233.0740 Fax: 1.403.233.0725 E-Mail: sales@Hitachi-ID.com

www.Hitachi-ID.com Date: May 22, 2015 File: PRCS:pres