Citrix Password Manager™ strengthens application security and eliminates the security breaches that are common when users have more passwords than they can manage. It simplifies user access, facilitates regulatory compliance and is easy to deploy and use. Password Manager does not require scripting, application-level integration, or significant changes to existing IT infrastructure.  

To see Password Manager in action, view our Citrix Password Manager demo.

Strengthens application security and facilitates regulatory compliance

Password policy enforcement
Specifies strong password characteristics such as length, character repetition and alphanumeric requirements on a per-application basis – applies to manual and automated password changes. Strong password policies provide enhanced security.

Batch Credential Provisioning
Administrators roll out new applications without insecure credential distribution. Use the batch credential provisioning tool to pre-populate the Password Manager central store with users’ secondary credentials, which also eliminates this task for first time users.

Transparent password change
Makes transparent the password change process with passwords hidden from end users. Because passwords remain hidden from end-users, only the primary network logon needs to be deactivated to de-provision user access.

Password Expiration
Administrators can force regular and transparent password changes on applications that do not have periodic password change functionality.

Cryptographic data integrity assurance
Password Manager provides an additional layer of security control by using cryptographic signing to ensure the integrity of configuration settings and policies read by the Password Manager agent, protecting against man-in-the-middle and phishing hacker attacks.

Interoperability with multifactor authentication devices such as smart cards, tokens and biometric devices
Uses the Windows security subsystem and works out-of-the-box with many popular multifactor authentication devices, including certificate-based and password-based devices.  No additional integration is necessary.  

Integration with user provisioning products
Allows the use of user provisioning products like HP Select Identity, Courion AccountCourier and IBM Tivoli Identity Manager to add and remove users’ applications logon credentials from the Password Manager central store.

Third-party security certification
As indicated in an external security review, Password Manager is secure and follows security best practices.  Trust enterprise credentials with proven security. Password Manager for Presentation Server and Password Manager Enterprise Edition are currently in the process of Common Criteria Certification.  
Simplifies user access and improves productivity

Fast, automated logon
Requires users to logon only once with their network credentials and automates subsequent logons to applications access through a Web browser, Windows client, or host terminal emulator to increase employee productivity and user satisfaction.  

Self-service password reset and account unlock
Allows users to reset their domain password or unlock their Windows account from their PC, which further reduces help desk costs for password resets.

Hot Desktop fast user switching
Enables users who share workstations to logon/logoff in seconds instead of using a time-consuming, full Windows or Novell logon/logoff procedure.  Hot Desktop improves user productivity, provides more seamless access to IT resources, and eliminates generic logon accounts to improve employee accountability.  

Streamlines management and deployment

Citrix Access Suite console
The Password Manager console includes task-based configuration and is a Microsoft Management Console (MMC) snap-in to the Presentation Server console to provide a consistent user interface for Password Manager and the Citrix Access Suite.  

Citrix access client
The Password Manager client can be combined with other Citrix access clients into a single Microsoft Software Installation (MSI) package and multiple Citrix access clients can be easily deployed at one time.

Broad-based directory support
With a for-fee technical enhancement, Password Manager can use LDAP-compliant directories such as Microsoft Active Directory Application Mode (ADAM), Novell eDirectory, IBM Tivoli Directory Server, and Sun Java System Directory Server, providing additional options for storage of credentials and settings.   

Enhanced NTFS network share
An NTFS network share can be used to enable per-user settings for deploying Password Manager and to provide more granular control of user settings by seamlessly generating a file share structure that emulates an Active Directory deployment.     

Windows Server 2003 x64 compatibility
The Citrix Password Manager agent can be installed on Citrix Presentation Server running on Windows Server 2003 x64.

On-demand licensing
Citrix Access Suite On-Demand Licensing services can be used to manage Password Manager licenses and all other Access Suite products in a single license repository.