Password Management Issue

[The Poster]

G/Day forum,

I'm looking for a password management utility for all Tech Support staff.
This utility would have to manage passwords for accessing the following
device types:

- Windows 2000 Domain Resources (Active Directory Based)
- Windows 2003 Web Servers
- Multiple DMZ Locations (different subnets/standalone Windows based
systems)
- Cisco IOS based Routers/Switches
- Cisco PIX firewalls (ssh access)
- Cisco VPN Concentrators (https/ssh access)

Any ideas on what I could use?

Regards,
Steve.

 

[Roger Abell]

Hey Steve,

I am wonder what it is that you mean by "manage passwords".
as that can mean different things to different people/needs.

 

[The Poster]

Hi Roger,

"manage passwords" as in save the user the hassle of remembering multiple
user/password combinations that they would use for accessing the different
systems on our network.

Apologies for the previous ambiguous post.

Steve.

 

[MH]

SSO - Single Sign On swipe card

Hi Roger,

"manage passwords" as in save the user the hassle of remembering multiple
user/password combinations that they would use for accessing the different
systems on our network.

Apologies for the previous ambiguous post.

Steve.

 

[Patty Calcaterra]

As stated, you will want to look into some SSO incorporated with an
Identity Management application...There are a myriad of them on the
market and depending on the sort of money you have to spend on such an
app, I could recommend a few.....

Now, mind you, I don't know your entire environment but such a solution
could be used for your entire enterprise to manage authorization and
authentication to the proper resources...

Anyhow, to name a few, consider:

BMC:
http://www.bmc.com/products/products_services_detail/0,,0_0_0_1902,00.html

IBM Tivoli

And yes, even Microsfot has one called MIIS....However, BMC is a mighty
fine one .

Regards,

Patty

 

[Paul Williams [MVP]]

MIIS tends to come in a lot cheaper than the others. I've only used MIIS
and have to say it is great. None are cheap however; you're looking at
about 40K +.

 

[Patty]

You may also look into using a couple of tools...there are a myriad of
delegating administration for AD (Quest has a really nice one)...and
then Cisco has a handy one called Secure ACS that manages all their
hardware and software permissioning and administration....

And then, if you want to add complication, introduce IdM into the
picture . Both AD and Cisco's ACS are LDAP complaint to be tied
into an IdM solution.

Regards,

Patty