Privileged Access and Administrator Password Management

BeyondTrust PowerKeeper® is an Automated Password Management (APM) solution for access control, manageability and audit of all types of privileged accounts such as shared administrative accounts, application accounts, and local administrative accounts. PowerKeeper is available as a hardened physical appliance and a secure virtual machine to match an enterprise’s specific environmental needs. PowerKeeper enables organizations to reduce the risk posed by shared account access and instead provides a controlled and auditable process that generates onetime use passwords (OTP), rotates the password on any system managed by PowerKeeper, and tracks user and password activity within PowerKeeper.

PowerKeeper is a critical component of the BeyondTrust PowerSeries product suite that automates Privilege Access Lifecycle Management (PALM). PowerKeeper secures the “Access” stage of PALM and lays the foundation for best-of-breed granular privilege access control from other BeyondTrust solutions.

For additional reliability, all encryption in PowerKeeper is provided by commercially supported, FIPS 140-2 validated software. Only PowerKeeper can deliver the level of security and reliability that organizations need to satisfy compliance, auditing, operational, and internal risk-management requirements.

Privileged passwords are difficult to manage. They are often shared among individuals, lost or forgotten, left as default passwords, not regularly maintained, and not protected from misuse. This results in high administration costs and lower productivity. Ignoring this reality creates unacceptable security risks, and also violates government regulations (like SOX, HIPAA, and GLBA) and industry standards (like PCI DSS and ISO 27002). Compliance with these regulations and standards requires the creation of a secure access-control infrastructure and adherence to security best practices. BeyondTrust PowerKeeper provides a simple to implement, straight forward solution to these problems and closes these security risks while helping you demonstrate and meet compliance requirements.

Strong, process-based methodology: A user requests a password through PowerKeeper, “checks out” the password (which may require approval) and uses it to log in to a privileged account. Similarly, an application requests a password and PowerKeeper authenticates the application against the approved program factors. If authenticated, Power¬Keeper checks out a one-time password to the application. In either case, PowerKeeper can rotate the password after it is “checked in” or after a pre-determined time. All requests and password activity are logged by PowerKeeper.