News

ManageEngine Launches Privileged Identity Management Suite to Combat Identity Theft, Mitigate Security Risk

Key Manager Plus, Password Manager Pro Integration Now Lets Enterprises Centrally Manage Privileged Passwords, SSH Keys, SSL Certificates

  • Provides holistic view of privileged identity usage and accountability across IT departments
  • Operational efficiency enables IT teams to complete daily routines from a single interface
  • Sign up for a free, 30-day trial at http://ow.ly/wPMN30gSFPK

PLEASANTON, Calif. - November 30, 2017 - ManageEngine, the real-time IT management company, today announced the launch of a comprehensive privileged identity management (PIM) suite to help enterprises reinforce their security defenses against the fast-growing threat of identity theft. By tightly integrating its SSH key and SSL certificate management software, Key Manager Plus, with its privileged account management software, Password Manager Pro, ManageEngine has created a PIM suite that empowers IT admins to centrally manage privileged passwords, SSH keys and SSL certificates from a single user interface.

Click to tweet this news.

IT teams commonly deploy both password-based and key-based authentication methods to validate privileged actions such as remote administrative access and sensitive data transfer. As a result, most IT environments are brimming with innumerable privileged accounts, digital keys, and certificates. These privileged identities form a security perimeter around mission-critical data servers and other IT assets. With the threat of identity theft looming large, safeguarding privileged identities, as well as controlling and auditing their usage, has gained paramount importance. Organizations are usually forced to employ multiple tools to manage different types of identities, but a comprehensive approach to privileged identity management could make this task less daunting.

"Leaving the door open for attackers is what enterprises are doing when they fail to enforce a strict process for using shared privileged accounts that rely on both password and key-based authentication," said Rajesh Ganesan, director of product management at ManageEngine. "Our ManageEngine integrated suite speeds the timely deployment of a privileged access management solution to protect sensitive, privileged information."

A Unified PIM to Close Critical Blind Spots in Privileged Access

With Password Manager Pro, ManageEngine has focused, until now, on providing enterprises with an in-depth solution to control, manage, monitor and audit the entire life cycle of privileged accounts and their access. By integrating with Key Manager Plus, Password Manager Pro now stands equipped to allow IT teams to tighten their control over the usage and management of digital keys and certificates. This helps enterprises to easily employ security best practices for all privileged identities from just one user interface. Additionally, the suite provides a consolidated audit trail that - when integrated into SIEM and threat analysis frameworks - can close critical blind spots related to privileged access in an enterprise.

The integration delivers dedicated provisions within Password Manager Pro's user interface for SSH key and SSL certificate management, including:

  • Automatic SSH and SSL discovery: Discover SSH keys and SSL certificates deployed in the network. Consolidate all discovered entities and store them in Password Manager Pro's secure repository.
  • Keys dashboard: Utilize a new dashboard that displays reports and graphs to provide a holistic view of SSH keys and SSL certificate usage, upcoming certificate expiration and more.
  • Centralized key creation: Create new public and private key pairs and associate private keys with their users. Rotate key pairs regularly. Get a holistic view of key-to-user relationships across the organization.
  • Certificate signing request (CSR) creation: Centrally control CSR processes. Get ready-to-use CSR data files to be sent to the certificate authority for getting new certificates. Receive alerts when certificates are about to expire.
  • Let's Encrypt integration: Enable end users to acquire, deploy, renew and revoke SSL certificates for public domains through an integration with Let's Encrypt, the renowned open certificate authority.
  • SSL vulnerability scanning: Scan all SSL certificates in the repository as well as endpoint servers to identify OCSP revoked certificates and SSL configurations prone to vulnerabilities.
  • Flag SHA-1 certificates: Flag certificates that use the insecure SHA-1 hashing function, and prompt administrators to revoke those certificates and create new ones.

To learn more about the ManageEngine privileged identity management suite, visit www.manageengine.com/products/passwordmanagerpro/complete-privileged-identity-management-suite.html.

Pricing and Availability

Password Manager Pro (version 9.4) is available as Free, Standard, Premium and Enterprise editions. Standard edition prices start at $495 per year for two administrators. Premium edition prices start at $1,195 per year for five administrators. Enterprise edition prices start at $2,995 per year for 10 administrators (no restrictions on the number of end users and managed passwords). A free, fully functional, 30-day trial version is available at www.manageengine.com/products/passwordmanagerpro/download.

Key Manager Plus (version 5.2) is available as a Free edition and Standard edition. The Free edition supports a maximum of five keys. Standard edition prices start at $395 per year for managing 25 keys. The Key Manager Plus license can be used separately or within Password Manager Pro to activate the integrated setup for complete privileged identity management, along with a consolidated view of all privileged accounts, digital keys and certificates managed. A free, fully functional, 30-day trial version is available at www.manageengine.com/key-manager/download.

About Password Manager Pro

Password Manager Pro is a complete solution to control, manage, monitor and audit the entire life cycle of privileged accounts and their access in an enterprise. It offers three solutions in a single package: privileged account management, remote access management, and privileged session management. Password Manager Pro fully encrypts and consolidates all your privileged accounts in a centralized vault, which is reinforced with granular access controls. It also helps mitigate security risks related to privileged access as well as pre-empt security breaches before they disrupt your business. The software also enables you to meet security audits and compliance requirements stated in various regulations such as HIPAA, PCI and SOX. For more information on Password Manager Pro, please visit www.manageengine.com/passwordmanagerpro.

About Key Manager Plus

Key Manager Plus is a web-based key management solution that helps consolidate, control, manage, monitor and audit the entire life cycle of Secure Shell (SSH) keys and Secure Sockets Layer (SSL) certificates. It provides visibility into the SSH and SSL environment and helps administrators take total control of the keys to preempt breaches and compliance issues. For more information about Key Manager Plus, please visit www.manageengine.com/key-manager.

About ManageEngine

ManageEngine is bringing IT together for IT teams that need to deliver real-time services and support. Worldwide, established and emerging enterprises - including more than 60 percent of the Fortune 500 - rely on our real-time IT management tools to ensure tight business-IT alignment and optimal performance of their IT infrastructure, including networks, servers, applications, desktops and more. ManageEngine is a division of Zoho Corporation with offices worldwide, including the United States, India, Singapore, Japan and China. For more information, please visit buzz.manageengine.com/; follow the company blog at blogs.manageengine.com/, on Facebook at www.facebook.com/ManageEngine and on Twitter @ManageEngine.

Media Contact:

Avinash Kagava
ManageEngine
avinash.kagava@zohocorp.com
Follow us on Twitter: @manageengine