Citrix Password Manager

Citrix Password Manager

Strengthen App Security and Speed User Logons Without App Development

Citrix Password Manager increases application security for all applications, whether delivered by Presentation Server or deployed to the desktop. Organizations may now centralize password management with IT for greater control, while users experience the productivity gains of fast, automated logons to Web, Windows, and host-based applications.

Introducing Password Manager 4.6

Citrix Password Manager 4.6 includes the new Password Manager Product Line:

• Password Manager for XenApp
• Password Manager Advanced Edition
• Password Manager Enterprise Edition

Password Manager has also been enhanced with greater application compatibility and extensible application definitions to make SSO-enabling applications quicker and more efficient. Administration may now be conducted by Active Directory Group providing greater flexibility and easier deployment, the process of changing passwords has been simplified and immediate confirmation provided, and users with more than one Windows account may now leverage their SSO credentials across their multiple accounts. For Government and security-conscious buyers, Password Manager is Common Criteria Certified, EAL2. Learn more.

Introducing the Citrix/Hewlett-Packard Identity and Access Management Solution
Citrix and HP have created a comprehensive Identity and Access Management solution that combines Citrix Password Manager with the HP OpenView Identity and Access Management suite.  The Citrix/HP solution enables enterprises to provide complete, secure information access to employees, customers and partners worldwide. Learn more.

Introducing an Opportunity to Solve Your Business and IT Challenges
Password Manager fundamentally changes the typical approach for managing multiple passwords, centralizing password management and moving this important capability into the hands of the IT organization.

The result?

• Application security is strengthened – Password Manager eliminates the need for employees to track multiple passwords by automating password management and centralizing it with IT.
• User access is simplified – The logon process is fully automated - users simply log on once and Password Manager authenticates the user to all other password-protected applications.
• Regulatory compliance is facilitated - Legislation such as the Health Insurance Portability and Accountability Act (HIPAA) imposes stringent requirements for controlling which individuals can access which information and for protecting the privacy of consumers. Learn more about achieving HIPAA compliance.
• Help desk calls decrease – With Password Manager, routine password-related events are automated and made invisible to the end user. Users may also reset their own primary Windows password – eliminating many time consuming and costly help desk calls.
• Platform support broadens – Password Manager supports Windows, Web and host-based applications, whether the applications are delivered by Presentation Server or deployed to the desktop.
• Implementation becomes easy – With powerful configuration tools, a task-based management console and no scripting required, Password Manager is easily configured in your existing environment.

As a stand-alone password management solution, or delivered by XenApp Platinum, or integrated with third-party products such as Strong Authentication, User Provisioning, and Context Management, Password Manager increases application security, speeds application delivery, simplifies user access, and facilitates regulatory compliance.

Citrix Password Manager Features

Citrix Password Manager™ strengthens application security and eliminates the security breaches that are common when users have more passwords than they can manage. It simplifies user access, facilitates regulatory compliance and is easy to deploy and use. Password Manager does not require scripting, application-level integration, or significant changes to existing IT infrastructure.

To see Password Manager in action, view our Citrix Password Manager demo.

Strengthens application security and facilitates regulatory compliance

Password policy enforcement
Specifies strong password characteristics such as length, character repetition and alphanumeric requirements on a per-application basis – applies to manual and automated password changes. Strong password policies provide enhanced security.

Batch Credential Provisioning
Administrators roll out new applications without insecure credential distribution. Use the batch credential provisioning tool to pre-populate the Password Manager central store with users’ secondary credentials, which also eliminates this task for first time users.

Transparent password change
Makes transparent the password change process with passwords hidden from end users. Because passwords remain hidden from end-users, only the primary network logon needs to be deactivated to de-provision user access.

Password Expiration
Administrators can force regular and transparent password changes on applications that do not have periodic password change functionality.

Cryptographic data integrity assurance
Password Manager provides an additional layer of security control by using cryptographic signing to ensure the integrity of configuration settings and policies read by the Password Manager agent, protecting against man-in-the-middle and phishing hacker attacks.

Interoperability with multifactor authentication devices such as smart cards, tokens and biometric devices
Uses the Windows security subsystem and works out-of-the-box with many popular multifactor authentication devices, including certificate-based and password-based devices.  No additional integration is necessary.  

Integration with user provisioning products
Allows the use of user provisioning products like HP Select Identity, Courion AccountCourier and IBM Tivoli Identity Manager to add and remove users’ applications logon credentials from the Password Manager central store.

Third-party security certification
As indicated in an external security review, Password Manager is secure and follows security best practices.  Trust enterprise credentials with proven security. Password Manager for Presentation Server and Password Manager Enterprise Edition are currently in the process of Common Criteria Certification.  
Simplifies user access and improves productivity

Fast, automated logon
Requires users to logon only once with their network credentials and automates subsequent logons to applications access through a Web browser, Windows client, or host terminal emulator to increase employee productivity and user satisfaction.  

Self-service password reset and account unlock
Allows users to reset their domain password or unlock their Windows account from their PC, which further reduces help desk costs for password resets.

Hot Desktop fast user switching
Enables users who share workstations to logon/logoff in seconds instead of using a time-consuming, full Windows or Novell logon/logoff procedure.  Hot Desktop improves user productivity, provides more seamless access to IT resources, and eliminates generic logon accounts to improve employee accountability.  

Streamlines management and deployment

Citrix Access Suite console
The Password Manager console includes task-based configuration and is a Microsoft Management Console (MMC) snap-in to the Presentation Server console to provide a consistent user interface for Password Manager and the Citrix Access Suite.  

Citrix access client
The Password Manager client can be combined with other Citrix access clients into a single Microsoft Software Installation (MSI) package and multiple Citrix access clients can be easily deployed at one time.

Broad-based directory support
With a for-fee technical enhancement, Password Manager can use LDAP-compliant directories such as Microsoft Active Directory Application Mode (ADAM), Novell eDirectory, IBM Tivoli Directory Server, and Sun Java System Directory Server, providing additional options for storage of credentials and settings.   

Enhanced NTFS network share
An NTFS network share can be used to enable per-user settings for deploying Password Manager and to provide more granular control of user settings by seamlessly generating a file share structure that emulates an Active Directory deployment.     

Windows Server 2003 x64 compatibility
The Citrix Password Manager agent can be installed on Citrix Presentation Server running on Windows Server 2003 x64.

On-demand licensing
Citrix Access Suite On-Demand Licensing services can be used to manage Password Manager licenses and all other Access Suite products in a single license repository.