Knowledge Center > Tips

The Credentials Manager is part of the overall ipMonitor security strategy. It's used with individual Monitors, Alerts and features that require access to Windows® file system objects or Services. The Credentials Manager allows Monitors and Alerts to run under a designated network NT account permitting the software to use elevated privileges only when required.

Credentials are the property of an Administrator on the system. As such, only Administrator accounts may add, delete or edit a Credential.

• If Users are to employ Credentials, the Credential itself must explicitly allow for use by others, or the Administrator must apply the desired Credential.
• If access to the Credential is granted, it can also be revoked by specifying that the Credential May only be authorized for use by the owner from the Usage Restrictions section.

In the event of multiple Administrator accounts, all Administrators have access to view the Credentials; however, a Credential can only be edited by the Administrator who created it. If a different Administrator needs to edit a Credential, the Credential has to be overridden. The Administrator must take ownership of that Credential, therefore resetting it, then must re-enter the Credential data.

Warning! If the Administrator grants use of a Credential that allows for transmitting the password in clear text, a User can easily obtain the full account and password information by retrieving the packet captures and log files ipMonitor has transmitted from a restricted file.

If you use the Credentials Manager without installing a SSL Certificate, the Credentials Manager will not transmit sensitive data unless you're accessing ipMonitor from the local machine.

To protect the integrity of Credential data, ipMonitor uses RSA 512/1024-bit key encryption technology to store all sensitive NT account information and Credential configuration parameters.

Note: We recommend you always use Credentials with any Monitor that requires access to Windows® file system objects or Services.

For information on other features and concepts related to those discussed in this article, refer to the following ipMonitor resources:

< Back

Last Updated: April 19, 2006 | What did you think of this topic?