Chat now with support
Chat with Support

Password Manager 5.7.1 - Administration Guide

About Password Manager Getting Started Password Manager Architecture
Password Manager Components and Third-Party Solutions Typical Deployment Scenarios Password Manager in Perimeter Network Management Policy Overview Password Policy Overview Secure Password Extension Overview reCAPTCHA Overview User Enrollment Process Overview Questions and Answers Policy Overview Password Change and Reset Process Overview Data Replication Phone-Based Authentication Service Overview
Management Policies
Checklist: Configuring Password Manager Understanding Management Policies Configuring Access to the Administration Site Configuring Access to the Self-Service Site Configuring Access to the Helpdesk Site Configuring Questions and Answers Policy Workflow Overview Custom Workflows Custom Activities Self-Service Workflows Helpdesk Workflows Notification Activities User Enforcement Rules
General Settings Upgrading Password Manager Secure Password Extension Password Policies Reporting Password Manager Integration Appendixes Glossary About us

Web Interface Customization

Web Interface Customization

Password Manager provides a simple and convenient way to customize the appearance of the Self-Service and Helpdesk sites. For example, you can change the company and product logos, and modify the color scheme.

To replace product and company logos with custom images

  1. On the home page of the Administration site, click General Settings, and then click the Web Interface Customization tab.
  2. Under the Large product logo option, click Change to browse for your custom image. Note, the image size must be 440 by 70 pixels and the image must be saved as a .PNG with transparency. The large product logo is used only on the logon page of the Helpdesk site.
  3. Under the Product logo option, click Change to browse for your custom image. Note, the image size must be 400 by 48 pixels and the image must be saved as a .PNG with transparency.
  4. Under the Company logo option, click Change to browse for your custom image. Note, the image size must be 115 by 48 pixels and the image must be saved as a .PNG with transparency.
  5. Click Save.

By modifying the color scheme you can customize the appearance of the Self-Service and Helpdesk sites to fit your corporate standards. Each color scheme offers a main color, page title, text, hyperlink, icon, button, button text and error text colors. The main color defines the logo bar color.

To modify the color scheme

  1. On the home page of the Administration site, click General Settings, and then click the Web Interface Customization tab.
  2. Under the Color scheme option, select the required color scheme for the Self-Service and Helpdesk sites. Click Preview to preview the selected color scheme.
  3. To adjust the color scheme select the Custom option or adjust one or several colors of the selected color scheme by using a color picker.
  4. Click Save.

Instance Reinitialization

Instance Reinitialization

This section provides information on how to reinitialize an instance of Password Manager Service. Reinitialization means changing any of the settings you specified during initialization: the certificate for encrypting traffic between the standalone Self-Service and Helpdesk sites and the Password Manager Service, port number, encryption algorithm and key length, and hashing algorithm.

You may want to reinitialize the Password Manager instance to change any of the settings you specified when initializing the instance.

Modifying Service Connection Settings

Using service connection settings you can specify the following:

  • Certificate name - use this setting to enter the name of the certificate for authentication and traffic encryption the Password Manager Service and the Web sites (Self-Service and Helpdesk). By default, Password Manager uses a built-in certificate issued by One Identity for this purpose. If you install the Web sites on a standalone server, it is recommended to replace the default certificate with a custom certificate issued by a trusted Windows-based authentication authority.

For more information on obtaining and installing custom certificates, see Specifying Custom Certificates for Authentication and Traffic Encryption Between Password Manager Service and Web Sites.

  • Port number - use this setting to specify the port that the Self-Service and Helpdesk sites will use to connect to the Password Manager Service. By default, port 8081 is used.

    IMPORTANT: If you change the certificate and port number, the Self-Service and Helpdesk sites installed on standalone servers will be unavailable to users until you reinitialize the sites using the updated settings. For information, see Installing Self-Service and Helpdesk Sites on a Standalone Server.

To modify the service connection settings

  1. On the home page of the Administration site, click General Settings, and then click the Instance Reinitialization tab.
  2. Under Service connection settings, from the Certificate name drop-down list, select the required certificate for authentication and traffic encryption between the Web sites (Self-Service and Helpdesk) and the Password Manager Service.
  3. In the Port number text box, enter the port number you want the Web sites to use to connect to the Password Manager Service.
  4. Click Save.

Modifying Advanced Settings

Using the advanced settings you can specify the following:

  • Encryption algorithm - use this setting to select the encryption algorithm that is used to encrypt users’ answers to secret questions and other security sensitive information. You can select from two options: Triple DES and AES. By default, Password Manager uses Triple DES algorithm to encrypt data. Note, that users’ answers will be encrypted if the “Store answers using reversible encryption” option is selected in the Q&A Profile settings. Otherwise, the answers will be hashed.
  • Encryption key length - use this setting to select whether a 192-bit or 256-bit encryption key will be used.
  • Attribute for storing Q&A profiles - use this setting to enter the attribute name that will be used for storing Q&A profile data. By default, Password Manager stores Q&A profile data in the comment attribute of each user's account and the configuration data in the comment attribute of a configuration storage account, which is automatically created when installing Password Manager.
  • Caution: If you change encryption settings and the attribute for storing Q&A profiles, the current instance will be excluded from a realm it belongs to and users may lose their Q&A profiles.

    When you change these settings, do the following to keep users’ Q&A profiles:

    • Export the current configuration when saving updated instance settings.
    • Update Q&A profiles using the Migration wizard (upload the exported configuration to the wizard) on the current instance.
    • To replicate new settings and updated Q&A profiles export the updated configuration from the current instance and import the configuration to other instances.

    If you do not use the Migration wizard to update users’ Q&A profile after changing the settings, users will have to re-register with Password Manager.

  • Hashing algorithm - use this setting to select the hashing algorithm that will be used to hash users’ answers to secret questions. The following algorithms are available: MD5 and SHA-256. By default, Password Manager uses SHA-256 hashing algorithm. Password Manager will hash users’ answers if “Store answers using reversible encryption option is not selected in the Q&A Profile settings.

    IMPORTANT: If you change the hashing algorithm, the selected algorithm will be applied to newly created Q&A profiles only. Existing Q&A profiles will be hashed with the previously selected algorithm.

To modify the advanced settings

  1. On the home page of the Administration site, click General Settings|Instance Reinitialization, and expand the Advanced settings section.
  2. From the Encryption algorithm drop-down list, select the encryption algorithm for encrypting users’ answers to secret questions and other security sensitive data.
  3. From the Encryption key length drop-down list, select whether a 192-bit or 256-bit encryption key will be used to encrypt data.
  4. In the Store user’s Questions and Answers profile in the following attribute of user’s account in Active Directory text box, enter the attribute name of user account in Active Directory in which you want to store user’s Q&A profile.
  5. From the Hashing algorithm drop-down list, select the algorithm that will be used to hash users’ authentication answers.
  6. Click Save.
  7. In the Reinitialize Instance dialog box, a password is generated for the configuration file that you should export to update users’ Q&A profiles and click Export.
  8. Click Save.

To update users’ Q&A profiles with new instance settings

  1. Run the Migration wizard from the Password Manager CD autorun window.
  2. On the Welcome page, select the Update users’ Q&A profiles with new instance settings task.
  3. On the next page, upload the configuration file you exported. Click Browse to select the file, enter the password generated while exporting the configuration file, and click Next.
  4. On the Select users page, do one of the following and click Next:
  • If you want to convert the Q&A profiles of users from the user scope of a Management Policy, select the required policy in the Select Management Policy drop-down box and click Next.
  • If you want to convert the Q&A profiles of a users in a user group, select The following groups. To select groups, click Add and do the following:
    • In the Add Groups dialog box, enter the group name, select the domain from the list and click Search.
    • Select the required groups in the list and click Save.
  • If you want to convert the Q&A profiles of a users in an OU, select The following OUs. To select OUs, click Add and do the following:
    • In the Add OUs dialog box, enter the OU name, select the domain from the list and click Search.
    • Select the required OUs in the list and click Save.
  1. On the next page, do one of the following and click Next:
    • Click Update Q&A profiles in test mode to update profiles in test mode. Use this mode to preview the result of updating profiles.
    • Click Update Q&A profiles in production mode to update profiles in production mode.
  2. On the status page, click View the report for detailed information to view a detailed account of updating profiles. If you updated Q&A profiles in test mode, click Update Q&A profiles in production mode.

After you have updated the Q&A profiles with new instance settings, join other instances to this realm by exporting the configuration from the current instance and importing it to other instances. For more information on how to import and export configuration settings, see Import/Export Configuration Settings.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating