Password Manager - Revision history

Dina: /* Keyboard Shortcuts */

2021-06-27T10:22:41Z

Keyboard Shortcuts

← Older revision		Revision as of 10:22, 27 June 2021
Line 366:		Line 366:
	'''CTRL+C''' - copy Password to clipboard<br>		'''CTRL+C''' - copy Password to clipboard<br>
	'''CTRL+U''' - execute URL / command		'''CTRL+U''' - execute URL / command


			==See Also==
			*[[Import Passwords]]

Dina at 13:19, 8 July 2020

2020-07-08T13:19:34Z

Dina: /* Enable/Disable for the Web Interface */

2017-07-18T09:41:18Z

Enable/Disable for the Web Interface

← Older revision		Revision as of 09:41, 18 July 2017
Line 75:		Line 75:
	[[File:Password_manager_web_interface_activation.png\|center\|link=]]		[[File:Password_manager_web_interface_activation.png\|center\|link=]]

	'''Note:''' For further securing the Web interface consider enabling its 2-Factor Authentication feature.		'''Note:''' For further securing the Web interface consider enabling its [[Two_Factor_Authentication\|2-Factor Authentication feature]].


	==Employee Privileges==		==Employee Privileges==

Dina at 15:13, 16 July 2017

2017-07-16T15:13:49Z

Dina at 11:42, 11 July 2017

2017-07-11T11:42:41Z

← Older revision		Revision as of 11:42, 11 July 2017
Line 316:		Line 316:
	==Tips & Tricks==		==Tips & Tricks==

	~~'''~~URL Field~~'''<br>~~
			===URL Field===
	<br>		<br>
	The URL field can be used to execute any valid URL, for example, '''<nowiki>http://</nowiki>, <nowiki>ftp://</nowiki>'''		The URL field can be used to execute any valid URL, for example, '''<nowiki>http://</nowiki>, <nowiki>ftp://</nowiki>'''

Dina at 11:32, 11 July 2017

2017-07-11T11:32:12Z

← Older revision		Revision as of 11:32, 11 July 2017
Line 283:		Line 283:

	[[File:Password_manager_password_audit.png\|center]]		[[File:Password_manager_password_audit.png\|center]]



	===Password Versioning===		===Password Versioning===

Dina at 11:30, 11 July 2017

2017-07-11T11:30:57Z

← Older revision		Revision as of 11:30, 11 July 2017
Line 20:		Line 20:
	2. Must know a secret [[Password_Manager#What_is_a_Passphrase.3F\|Passphrase]] in order to access actual passwords.<br>		2. Must know a secret [[Password_Manager#What_is_a_Passphrase.3F\|Passphrase]] in order to access actual passwords.<br>
	3. May be required to be granted with [[Password_Manager#Security_Tokens\|Security Tokens]] in order to access some Password entries.<br>		3. May be required to be granted with [[Password_Manager#Security_Tokens\|Security Tokens]] in order to access some Password entries.<br>


	==Start using the Password Manager==		==Start using the Password Manager==
Line 59:		Line 60:
	An example of a passphrase:		An example of a passphrase:
	The snow is White. The ocean is Blue. Welcome 2 Baloo.		The snow is White. The ocean is Blue. Welcome 2 Baloo.


	===Changing Your Passphrase===		===Changing Your Passphrase===
Line 172:		Line 174:

	[[File:Password_manager_customize_token_names.png\|center]]		[[File:Password_manager_customize_token_names.png\|center]]



Line 191:		Line 194:

	[[File:Password_manager_account_security_settings2.png\|center]]		[[File:Password_manager_account_security_settings2.png\|center]]



Line 224:		Line 228:
	[[File:Password_manager_web_interface1.png\|1000px\|center]]		[[File:Password_manager_web_interface1.png\|1000px\|center]]

	~~<br>~~

	===Password Details===		===Password Details===
Line 249:		Line 253:
	<br>		<br>
	[[File:Password_manager_web_password_details.png\|center]]		[[File:Password_manager_web_password_details.png\|center]]



Line 271:		Line 276:

	[[File:Password_manager_password_security_settings3.png\|center]]		[[File:Password_manager_password_security_settings3.png\|center]]
	~~<br>~~


Line 284:		Line 289:
	Any Password entry update creates a new version of the previous Password entry, which is accessible from the ‘Previous Versions’ tab:		Any Password entry update creates a new version of the previous Password entry, which is accessible from the ‘Previous Versions’ tab:
	[[File:Password_manager_password_versions.png\|center]]		[[File:Password_manager_password_versions.png\|center]]



Line 293:		Line 299:

	[[File:Password_manager_main_window.png\|center]]		[[File:Password_manager_main_window.png\|center]]



Line 302:		Line 309:

	[[File:Password_manager_audit_log.png\|center]]		[[File:Password_manager_audit_log.png\|center]]



Line 344:		Line 352:

	'''cmd://C:\PuTTY\PUTTY.EXE -load "saved-session-name" -l <<USERNAME>> -pw <<PASSWORD>>'''		'''cmd://C:\PuTTY\PUTTY.EXE -load "saved-session-name" -l <<USERNAME>> -pw <<PASSWORD>>'''

Dina at 11:28, 11 July 2017

2017-07-11T11:28:07Z

← Older revision		Revision as of 11:28, 11 July 2017
Line 74:		Line 74:

	'''Note:''' For further securing the Web interface consider enabling its 2-Factor Authentication feature.		'''Note:''' For further securing the Web interface consider enabling its 2-Factor Authentication feature.


	==Employee Privileges==		==Employee Privileges==
Line 102:		Line 103:

	<u>Note</u>: The above window is also used to grant [[Password_Manager#Security_Tokens\|Security Tokens]] to Employees.		<u>Note</u>: The above window is also used to grant [[Password_Manager#Security_Tokens\|Security Tokens]] to Employees.


	==Security Tokens==		==Security Tokens==
Line 170:		Line 172:

	[[File:Password_manager_customize_token_names.png\|center]]		[[File:Password_manager_customize_token_names.png\|center]]


	===Account Security Settings===		===Account Security Settings===
Line 188:		Line 191:

	[[File:Password_manager_account_security_settings2.png\|center]]		[[File:Password_manager_account_security_settings2.png\|center]]


	===Employee Tokens===		===Employee Tokens===
Line 201:		Line 205:

	[[File:Employee_password_manager_privileges_grant_tokens2.png\|center]]		[[File:Employee_password_manager_privileges_grant_tokens2.png\|center]]



	==Passwords==		==Passwords==
Line 243:		Line 249:
	<br>		<br>
	[[File:Password_manager_web_password_details.png\|center]]		[[File:Password_manager_web_password_details.png\|center]]


	===Password Security Settings===		===Password Security Settings===
Line 295:		Line 302:

	[[File:Password_manager_audit_log.png\|center]]		[[File:Password_manager_audit_log.png\|center]]


	==Tips & Tricks==		==Tips & Tricks==
Line 336:		Line 344:

	'''cmd://C:\PuTTY\PUTTY.EXE -load "saved-session-name" -l <<USERNAME>> -pw <<PASSWORD>>'''		'''cmd://C:\PuTTY\PUTTY.EXE -load "saved-session-name" -l <<USERNAME>> -pw <<PASSWORD>>'''


	==Keyboard Shortcuts==		==Keyboard Shortcuts==

Dina: /* Tips & Tricks */

2017-07-10T13:35:58Z

Tips & Tricks

← Older revision		Revision as of 13:35, 10 July 2017
Line 313:		Line 313:

	'''cmd://C:\Windows\Notepad.exe C:\Documents\SampleFile.txt'''		'''cmd://C:\Windows\Notepad.exe C:\Documents\SampleFile.txt'''


	NOTE: Quotes (") should be used in case the file path contains spaces:		NOTE: Quotes (") should be used in case the file path contains spaces:
Line 330:		Line 330:

	<br>		<br>
	* This example assumes that samplesite.com supports passing the user credentials as GET parameters as part of the URL and that the parameter names are ‘user’ and ‘pass’. Note that each Website that supports this may use different parameter names.		<nowiki>*</nowiki> This example assumes that samplesite.com supports passing the user credentials as GET parameters as part of the URL and that the parameter names are ‘user’ and ‘pass’. Note that each Website that supports this may use different parameter names.<br>
	<br>

	4. Start a save PuTTY session and provide the user credentials automatically:		4. Start a save PuTTY session and provide the user credentials automatically:

Dina: /* Audit tab - Usage Log */

2017-07-10T13:33:07Z

Audit tab - Usage Log

← Older revision		Revision as of 13:33, 10 July 2017
Line 290:		Line 290:
	===Audit tab - Usage Log===		===Audit tab - Usage Log===

	This tab of the main Password Manager window lets administrators see a consolidated view of all Password usage audit log.		This tab of the main Password Manager window lets administrators see a consolidated view of all [[Password_Manager#Password_Audit\|Password usage audit log]].

	The view is chronologically ordered and it can be filtered to show only audit log related to a specific employee		The view is chronologically ordered and it can be filtered to show only audit log related to a specific employee

← Older revision		Revision as of 13:19, 8 July 2020
Line 9:		Line 9:
	Passwords can be easily searched and accessed from the Password Manager main window as well as the dedicated ‘Passwords’ tab under the Account and Asset windows.		Passwords can be easily searched and accessed from the Password Manager main window as well as the dedicated ‘Passwords’ tab under the Account and Asset windows.

	~~CommitCRM~~ automatically keeps the Password history. Each password update is saved as a password version, keeping all history changes, allowing future access to each version.		RangerMSP automatically keeps the Password history. Each password update is saved as a password version, keeping all history changes, allowing future access to each version.

	~~CommitCRM~~ also automatically manages a complete audit log about who accessed a password and when.		RangerMSP also automatically manages a complete audit log about who accessed a password and when.

	Advanced security tools that come with the Password Manager, provide a powerful toolset to control who has access to which password.		Advanced security tools that come with the Password Manager, provide a powerful toolset to control who has access to which password.
Line 25:		Line 25:

	===Enabling the Password Manager and Setting a Passphrase ===		===Enabling the Password Manager and Setting a Passphrase ===
	In order to start using the Password Manager, a ~~CommitCRM~~ administrator (aka SysAdmin) user should enable it first and set a global passphrase.		In order to start using the Password Manager, a RangerMSP administrator (aka SysAdmin) user should enable it first and set a global passphrase.

	Open the main Password Manager window by clicking the ‘Passwords’ icon located in the left side pane and the click the ‘Enable’ button.		Open the main Password Manager window by clicking the ‘Passwords’ icon located in the left side pane and the click the ‘Enable’ button.
Line 63:		Line 63:

	===Changing Your Passphrase===		===Changing Your Passphrase===
	A ~~CommitCRM~~ administrator user (aka SysAdmin) can change the passphrase by activating the following menu option: ''Settings > Password Manager > Change Passphrase''.		A RangerMSP administrator user (aka SysAdmin) can change the passphrase by activating the following menu option: ''Settings > Password Manager > Change Passphrase''.



	===Enable/Disable for the Web Interface===		===Enable/Disable for the Web Interface===
	A ~~CommitCRM~~ administrator user (aka SysAdmin) can enable or disable the Password Manager feature for the Web Interface.		A RangerMSP administrator user (aka SysAdmin) can enable or disable the Password Manager feature for the Web Interface.

	In general it is highly recommended to securely use Web Interface with SSL certificates and access it via the https protocol only. This is achieved by configuring the Web interface to work with Microsoft IIS as its Web server. This recommendation is even more so true when it comes to working with passwords. In case you have not yet migrated to using IIS [[Microsoft_IIS_as_the_Web_Server_for_the_Web_Interface\|click here]] for all details.		In general it is highly recommended to securely use Web Interface with SSL certificates and access it via the https protocol only. This is achieved by configuring the Web interface to work with Microsoft IIS as its Web server. This recommendation is even more so true when it comes to working with passwords. In case you have not yet migrated to using IIS [[Microsoft_IIS_as_the_Web_Server_for_the_Web_Interface\|click here]] for all details.
Line 112:		Line 112:
	Using Security Tokens is optional, however, understanding how it works will significantly increase the password management toolset, especially when it comes to secure access.		Using Security Tokens is optional, however, understanding how it works will significantly increase the password management toolset, especially when it comes to secure access.

	Only ~~CommitCRM~~ administrator users can manage the security Tokens.		Only RangerMSP administrator users can manage the security Tokens.


Line 166:		Line 166:

	===Naming Your Tokens===		===Naming Your Tokens===
	~~CommitCRM~~ comes with 128 predefined Tokens for you to use.<br>		RangerMSP comes with 128 predefined Tokens for you to use.<br>
	Token names can be fully customized to reflect your user case.		Token names can be fully customized to reflect your user case.

← Older revision		Revision as of 15:13, 16 July 2017
Line 30:		Line 30:


	[[File:Password_manager_activation.png\|center]]		[[File:Password_manager_activation.png\|center\|link=]]

	<br>		<br>
Line 73:		Line 73:

	In order to enable or disable the Password Manager feature for the Web interface visit ''Tools > Options > Web Interface (Admin)'' tab:		In order to enable or disable the Password Manager feature for the Web interface visit ''Tools > Options > Web Interface (Admin)'' tab:
	[[File:Password_manager_web_interface_activation.png\|center]]		[[File:Password_manager_web_interface_activation.png\|center\|link=]]

	'''Note:''' For further securing the Web interface consider enabling its 2-Factor Authentication feature.		'''Note:''' For further securing the Web interface consider enabling its 2-Factor Authentication feature.
Line 100:		Line 100:
	To manage Password Manager privileges for an Employee visit the ''Employee'' tab under their Employee Account record. Then, from the '''Configure User''' button dropdown select the '''Configure User''' option:		To manage Password Manager privileges for an Employee visit the ''Employee'' tab under their Employee Account record. Then, from the '''Configure User''' button dropdown select the '''Configure User''' option:

	[[File:Employee_password_manager_privileges.png\|center]]		[[File:Employee_password_manager_privileges.png\|center\|link=]]
	[[File:Employee_password_manager_privileges1.png\|center]]		[[File:Employee_password_manager_privileges1.png\|center\|link=]]


Line 173:		Line 173:
	''Settings > Password Manager > Customize Token Names'':		''Settings > Password Manager > Customize Token Names'':

	[[File:Password_manager_customize_token_names.png\|center]]		[[File:Password_manager_customize_token_names.png\|center\|link=]]


Line 188:		Line 188:

	To configure the Account Security Settings for Passwords an administrator user should visit the Account’s Passwords tab and click ''‘Edit’'':		To configure the Account Security Settings for Passwords an administrator user should visit the Account’s Passwords tab and click ''‘Edit’'':
	[[File:Password_manager_account_security_settings1.png\|center]]		[[File:Password_manager_account_security_settings1.png\|center\|link=]]


	Account Passwords can be protected by requiring [[Password_Manager#Security_Tokens\|Security Tokens]]. Depending on the setting, when Tokens are used Employee users must have '''All''' - OR - '''At-Least-One''' of the selected Tokens.		Account Passwords can be protected by requiring [[Password_Manager#Security_Tokens\|Security Tokens]]. Depending on the setting, when Tokens are used Employee users must have '''All''' - OR - '''At-Least-One''' of the selected Tokens.

	[[File:Password_manager_account_security_settings2.png\|center]]		[[File:Password_manager_account_security_settings2.png\|center\|link=]]


Line 204:		Line 204:
	Administrators can grant Tokens to a specific Employee by visiting the ''Employee'' tab under their Employee Account record. Then, from the '''Configure User''' button dropdown select the '''Configure User''' option, when the window is displayed click the ‘Grant Tokens’ link.		Administrators can grant Tokens to a specific Employee by visiting the ''Employee'' tab under their Employee Account record. Then, from the '''Configure User''' button dropdown select the '''Configure User''' option, when the window is displayed click the ‘Grant Tokens’ link.

	[[File:Employee_password_manager_privileges.png ‎\|center]]		[[File:Employee_password_manager_privileges.png ‎\|center\|link=]]

	[[File:Employee_password_manager_privileges_grant_tokens1.png\|center]]		[[File:Employee_password_manager_privileges_grant_tokens1.png\|center\|link=]]

	[[File:Employee_password_manager_privileges_grant_tokens2.png\|center]]		[[File:Employee_password_manager_privileges_grant_tokens2.png\|center\|link=]]


Line 223:		Line 223:
	Click ‘New’ to add a new Password entry.		Click ‘New’ to add a new Password entry.

	[[File:Password_manager_add_new_password.png\|center\|1000px]]		[[File:Password_manager_add_new_password.png\|center\|1000px\|link=]]
	<br>		<br>

	[[File:Password_manager_web_interface1.png\|1000px\|center]]		[[File:Password_manager_web_interface1.png\|1000px\|center\|link=]]


Line 250:		Line 250:


	[[File:Password_manager_password_details.png\|center]]		[[File:Password_manager_password_details.png\|center\|link=]]
	<br>		<br>
	[[File:Password_manager_web_password_details.png\|center]]		[[File:Password_manager_web_password_details.png\|center\|link=]]


Line 264:		Line 264:
	However, a Password can be configured, by an administrator, with Custom Settings. Such settings completely override and replace the security settings defined for the Account, if any.		However, a Password can be configured, by an administrator, with Custom Settings. Such settings completely override and replace the security settings defined for the Account, if any.

	[[File:Password_manager_password_security_settings1.png\|center]]		[[File:Password_manager_password_security_settings1.png\|center\|link=]]
	<br>		<br>

Line 270:		Line 270:
	When the ‘Custom Settings’ option is selected it is possible (optionally) to require that employees have the relevant [[Password_Manager#Security_Tokens\|Security Tokens]] in order to access the Password entry.		When the ‘Custom Settings’ option is selected it is possible (optionally) to require that employees have the relevant [[Password_Manager#Security_Tokens\|Security Tokens]] in order to access the Password entry.

	[[File:Password_manager_password_security_settings2.png\|center]]		[[File:Password_manager_password_security_settings2.png\|center\|link=]]
	<br>		<br>

	Depending on the setting (see below) when Tokens are used to protect a Password employee users must have '''All''' - OR - '''At-Least-One''' of the selected Tokens:		Depending on the setting (see below) when Tokens are used to protect a Password employee users must have '''All''' - OR - '''At-Least-One''' of the selected Tokens:

	[[File:Password_manager_password_security_settings3.png\|center]]		[[File:Password_manager_password_security_settings3.png\|center\|link=]]


Line 282:		Line 282:
	A usage audit log is tracked for each Password where every time a user fetches a password value it is fully logged and can be viewed by a system administrator user.		A usage audit log is tracked for each Password where every time a user fetches a password value it is fully logged and can be viewed by a system administrator user.

	[[File:Password_manager_password_audit.png\|center]]		[[File:Password_manager_password_audit.png\|center\|link=]]


Line 290:		Line 290:

	Any Password entry update creates a new version of the previous Password entry, which is accessible from the ‘Previous Versions’ tab:		Any Password entry update creates a new version of the previous Password entry, which is accessible from the ‘Previous Versions’ tab:
	[[File:Password_manager_password_versions.png\|center]]		[[File:Password_manager_password_versions.png\|center\|link=]]


Line 300:		Line 300:
	While the Passwords tab of the Accounts and Assets windows let you see Passwords related to the selected Account or Assets, the main window displays ALL Passwords and let you search for a specific Password.		While the Passwords tab of the Accounts and Assets windows let you see Passwords related to the selected Account or Assets, the main window displays ALL Passwords and let you search for a specific Password.

	[[File:Password_manager_main_window.png\|center]]		[[File:Password_manager_main_window.png\|center\|link=]]


Line 310:		Line 310:
	The view is chronologically ordered and it can be filtered to show only audit log related to a specific employee		The view is chronologically ordered and it can be filtered to show only audit log related to a specific employee

	[[File:Password_manager_audit_log.png\|center]]		[[File:Password_manager_audit_log.png\|center\|link=]]