Lieberman Software Brings Privileged Identity Management to Cloud Infrastructure
March 2010 by Marc Jacob
Lieberman Software Corporation announced significant enhancements to its account password management solution, Enterprise Random Password Manager™ (ERPM) that provides new levels of visibility and control for cloud service providers and their customers. ERPM now delivers fine-grain management features to protect every asset in the cloud infrastructure – including physical and virtual computers and network appliances, hypervisors, databases, middleware, line-of-business applications, and more. With this version of ERPM, cloud service providers can assure both customers and IT auditors that privileged access to sensitive data is continuously monitored and secured.
As the popularity of cloud infrastructure and services increase, so do concerns for data privacy and security. The on-demand cloud service model can necessitate rapid changes in physical and virtual infrastructure, decentralized data centers, and quickly evolving lines of responsibility and control for IT staff. Ad-hoc processes that rely on manual changes and scripts to secure privileged access can fail to keep up with these changes. And, these manual operations risk service disruptions should they not account for each process interdependency and carefully synchronize every password change.
Securing Cloud Computing Environments
ERPM continuously discovers, secures, and grants fully audited, role-based administrative access to physical and virtual IT assets within the cloud infrastructure. ERPM is the only privileged identity management solution with the essential features needed to secure the largest and most decentralized IT enterprises in all vertical markets. Key differentiators include:
· Continuous auto-discovery and propagation of privileged credentials as new physical and virtual systems are brought online;
· Direct authentication with all leading directory services to instantly maintain correct levels of access as personnel roles change;
· Zone Processing for reliable discovery and enforcement over high-latency WAN links and inside of network DMZs; and
· Deployment on the service provider’s choice of SQL Server or Oracle 11g databases for unmatched transparency and reliability.
The new version of ERPM adds the capability for cloud service providers to delegate different levels of privileged access, audit and compliance reporting to end-customers. With this feature, service providers can offer customers the option to grant or revoke access to sensitive systems on a time-limited and audited basis, and to see comprehensive operational reports or time-based analysis of administrative access by user, system and account. And, with its new dual-control multiple tenancy, ERPM secures all cloud stacks at both the physical layer (privileged system access) and the application layer.