Password Manager 5.7.1 - Administration Guide

Password Manager Components

Password Manager Components

Password Manager includes the following components:

Licensing

The Password Manager license specifies the maximum number of user accounts enabled for management by Password Manager in all managed domains. When launching the Administration site, Password Manager counts the actual number of user accounts, and compares it with the maximum number specified by the license. If the actual number exceeds the maximum licensed number, a license violation occurs. A warning message is displayed on every connection to the Administration site of Password Manager.

In the event of a license violation, you have the following options:

Exclude a number of user accounts from the user accounts managed by Password Manager to bring your license count in line with the licensed value and reconnect to the Administration site to recalculate the license number.

Remove one or more managed domain to decrease the number of managed user accounts.

Purchase a new license with a greater number of user accounts, and then update your license using the instructions provided later in this section.

Note that the following items are not limited by the license:

The number of computers connected to the Administration, Self-Service, and Helpdesk sites of Password Manager.

The number of Password Manager instances in a large enterprise, Password Manager can be installed on multiple computers for enhanced performance and fault tolerance.

Installing the License

The license is initially installed when you install the Password Manager:

1. In the Installation Wizard, click Licenses to display the License status dialog box.
2. Click Browse license, locate and open your license key file using the Select License File dialog box, and then click Close.

Some license types may include counters for managed persons and managed external persons along with a counter for user accounts. Managed persons are users that have several accounts; for example, one managed person can have three user accounts. Managed external persons are external or temporary employees. The same license violation policy is applied to managed persons and managed external persons as to user accounts. To specify these user groups, use the corresponding license scopes after you install Password Manager.

Note, that such scopes are available only if your license includes managed persons and managed external persons.

To add a domain to the managed persons scope

1. On the menu bar of the Administration site, click Licensing.
2. On the Licenses page, click the Managed Persons tab.
3. On the Scope of Managed Persons page, click Add domain connection.
4. If domain connections already exist, select a domain connection from the list. If you want to create a new connection, click Add domain connection.
5. If you selected to create the new domain connection, in the Add New Domain Connection dialog, configure access to the domain by doing the following:
   • In the Domain name text box, type the name of the domain that you want to register with Password Manager.
   • In the Domain alias text box, type the alias for the domain which will be used to address the domain on the Self-Service site.
   • To have Password Manager access the managed domain using the Password Manager Service account, select Password Manager Service account. Otherwise, select Domain management account, and then enter user name and password for the domain management account. Note, that if Password Manager Service account is used to access the domain, it should have the same permissions as the domain management account.

   For information on how to prepare a domain management account, see Configuring Permissions for Domain Management Account.

6. Click Save.

To specify groups or OUs included in the scope of managed persons

1. On the menu bar of the Administration site, click Licensing.
2. On the Licenses page, click the Managed Persons tab.
3. On the Scope of Managed Persons page, select the domain connection for which you want to specify groups or OUs and click Edit.
4. Do the following:
   • To specify the groups, click Add under Groups included into the scope of managed persons.
   • To specify the OUs, click Add under Organizational units included into the scope of managed persons.
5. Click Save.

To specify groups or OUs excluded from the scope of managed persons

1. On the menu bar of the Administration site, click Licensing.
2. On the Licenses page, click the Managed Persons tab.
3. On the Scope of Managed Persons page, select the domain connection for which you want to specify groups or OUs and click Edit.
4. Do the following:
   • To specify the groups, click Add under Groups excluded from the scope of managed persons.
   • To specify the OUs, click Add under Organizational units excluded from the scope of managed persons.
5. Click Save.

You can use the procedures below to specify the scope of managed external persons.

To add a domain to the managed external persons scope

1. On the menu bar of the Administration site, click Licensing.
2. On the Licenses page, click the Managed External Persons tab.
3. On the Scope of Managed External Persons page, click Add domain connection.
4. If domain connections already exist, select a domain connection from the list. If you want to create a new connection, click Add domain connection.
5. If you selected to create the new domain connection, in the Add New Domain Connection dialog, configure access to the domain by doing the following:
   • In the Domain name text box, type the name of the domain that you want to register with Password Manager.
   • In the Domain alias text box, type the alias for the domain which will be used to address the domain on the Self-Service site.
   • To have Password Manager access the managed domain using the Password Manager Service account, select Password Manager Service account. Otherwise, select Domain management account, and then enter user name and password for the domain management account. Note, that if Password Manager Service account is used to access the domain, it should have the same permissions as the domain management account.

   For information on how to prepare a domain management account, see Configuring Permissions for Domain Management Account.

6. Click Save.

To specify groups or OUs included in the scope of managed external persons

1. On the menu bar of the Administration site, click Licensing.
2. On the Licenses page, click the Managed External Persons tab.
3. On the Scope of Managed External Persons page, select the domain connection for which you want to specify groups or OUs and click Edit.
4. Do the following:
   • To specify the groups, click Add under Groups included into the scope of managed external persons.
   • To specify the OUs, click Add under Organizational units included into the scope of managed external persons.
5. Click Save.

To specify groups or OUs excluded from the scope of managed external persons

1. On the menu bar of the Administration site, click Licensing.
2. On the Licenses page, click the Managed External Persons tab.
3. On the Scope of Managed External Persons page, select the domain connection for which you want to specify groups or OUs and click Edit.
4. Do the following:
   • To specify the groups, click Add under Groups excluded from the scope of managed external persons.
   • To specify the OUs, click Add under Organizational units excluded from the scope of managed external persons.
5. Click Save.

Updating the License

If you have purchased a new license, you need to update the license by installing the new license key file. You can use the About section of the Administration site to install the file.

To update the license

1. On the menu bar of the Administration site, click Licensing.
2. On the Licenses page, click Install License.
3. Select the license key file.
4. Click Save.