1.1 About Password Manager Pro Password Manager Pro is a web-based, privileged identity management solution that lets IT teams manage privileged identities—passwords, SSH keys, and SSL certificates—as well as control and monitor privileged access to critical information systems from a single, central-ized console. Password Manager Pro is a secure enterprise password management software solution which serves as a centralized password vault to manage shared sensitive information, including privileged accounts, shared accounts, firecall accounts, documents and digital identities of. Password Manager Pro is used to store, share and manage privilege passwords and digital certificates. ManageEngine Password Manager Pro is a web-based, privileged password management solution tailored for enterprises. It securely stores and manages sensitive information such as shared passwords, documents, and digital identities.

• Password Manager Pro App
• Password Manager Pro
• Password Manager Pro Demo
• Password Manager Pros And Cons
• Password Manager Pro Manageengine
• Password Manager Pro Chrome Extension
• Password Manager Pro Reviews

Privileged Password Management With Password Manager Pro

Store & organize all your privileged identities in a centralized vault.

Securely share administrative passwords with the members of your team on need basis.

Automatically reset the passwords of servers, databases, network devices and other resources.

Password Manager Pro App

Control access to IT resources and applications based on roles and job responsibilities.

Launch direct connection to remote IT resources, websites and applications.

Video record & audit all privileged access, get complete record of all actions.

World's Largest Organizations Rely on Password Manager Pro

The IT divisions of some of the World's largest organizations and Fortune 500 companies rely on Password Manager Pro to control access to their IT infrastructure. Over 300,000 IT admins and end users log in to Password Manager Pro on a typical day and manage millions of privileged passwords.

Highlights of Password Manager Pro

Password Storage, Management & Workflow

Password Sharing, User Provisioning & Management

Remote Password Reset

Privileged Session Management, Remote Access & Auto Logon

Audit, Compliance & Reports

Secure and Enterprise Ready

Disaster Recovery & High Availability

• Success Stories
• Customer Voice
• Alliances
• Product Reviews
• Magazine Articles
• White Papers
• Advisory

Password Manager Pro has earned the business and goodwill of scores of customers worldwide. Its deployment has immensely benefitted businesses in many ways. The following are a few samples:

'The automated, policy-driven password management provided by Password Manager Pro has made us realize how inefficient and insecure the traditional 'excel sheet storage' approach was. Usage of Password Manager Pro is certainly the best practice approach for us.'

ManageEngine has partnered with PhoneFactor, the leading global provider of phone-based two-factor authentication, to enable simple, effective two-factor security for Password Manager Pro. ManageEngine is a PhoneFactor Alliance Partner and offers seamless integration with PhoneFactor's authentication services.

ManageEngine has forged a technology interoperability partnership with RSA, The Security Division of EMC (NYSE: EMC), and has achieved RSA Secured® certification. Password Manager Pro is technically interoperable with the RSA SecurID® two-factor authentication system.

'

Password Manager Pro offers a great feature set at a very reasonable cost.

'

SC Magazine, the world's longest running monthly publication focusing on information security reviewed Password Manager Pro as part of its Group Test of various password management solutions. Learn More.

Articles on Password Management authored by Password Manager Pro analyst in various magazines:

• The Hacker News
  Password Manager Pro — Easiest Way to Keep Enterprises Secure
• Network World
  Best password managers for the enterprise
• Business Computing World
  Passwords, King Of Authentication: Long Live The King!
• CRN Magazine
  Perils of Password Sharing in Enterprises

White Papers

Password Manager Pro

Advisory

What Platforms Does Password Manager Pro Support?

• Platforms (for password reset):Windows, Windows Domain, Linux, IBM AIX, IBM AS400, HP UNIX, Solaris, Mac OS, Sun Oracle XSCF, Sun Oracle ALOM, Sun Oracle ILOM, VMWare ESXi, MS SQL server, MySQL Server, Oracle DB Server, Sybase ASE, LDAP Server, HP iLO, HP ProCurve devices and Cisco Devices (IOS, CatOS, PIX), Juniper Netscreen Devices
• Platforms (for product installation): Windows, Linux

What Problems Does Password Manager Pro Solve?

If you are an IT Administrator responsible for securely managing your IT infrastructure, check yourself:

• Are you drowning in a pile of privileged passwords? Do you store administrative passwords in spreadsheets & flat files?
• Do you find it difficult to track who has access to which accounts?
• Do you laboriously logon to each application separately to periodically change passwords?

If yes, you certainly need Password Manager Pro!

Administrative/Privileged passwords are literally aplenty in enterprises. Servers, databases, switches, routers, firewalls and any other hardware or software, could have equally large number of administrative passwords. These passwords are insecurely stored in spreadsheets, text files and even as printouts and are shared by a group of administrators.

This traditional practice brings with it a host of issues such as:

• Insecure storage of passwords inviting security threats
• Uncontrolled super-user privileges
• No role-based access control; internal controls become fragile
• Lack of accountability for actions
• No provision for enforcing standard password practices/policies
• No centralized control

Password Manager Pro solves all these problems by providing a secure system to store, administer, and share passwords.

What are the Licensing Options for Password Manager Pro?

There are three license types:

• Evaluation download valid for 30 days capable of supporting a maximum of 2 administrators. You can test Enterprise edition features.
• Free Edition licensed software allows you to have 1 administrator and manage up to 10 resources. Valid forever.
• Registered Version - Licensing is based on two factors:

1. Number of Administrators
2. Type of Edition - Standard, Premium or Enterprise

Note:

Password Manager Pro comes with five user roles - Administrator, Password Administrator, Privileged Administrator, Password Auditor and Password User. The term 'administrator' denotes Administrators, Password Administrators and Privileged Administrators. So, licensing restricts the number of administrators as a whole, which includes Administrators, Password Administrators and Privileged Administrators. There is no restriction on the number of Password Users and Password Auditors. To get more details on the five user roles, refer to this section of our help documentation.

• Standard Edition - If your requirement is to have a secure, password repository to store your passwords and selectively share them among enterprise users, Standard Edition would be ideal.
• PremiumEdition - Apart from storing and sharing your passwords, if you wish to have enterprise-class password management features such as remote password synchronization, password alerts and notifications, application-to-application password management, reports, high-availability and others, Premium edition would be the best choice.
• Enterprise Edition - If you require more enterprise-class features like auto discovery of privileged accounts, integration with ticketing systems and SIEM solutions, jump server configuration, application-to-application password management, out-of-the-box compliance reports, SQL server / cluster as backend database, Enterprise edition will be ideal.

Password Management Features Matrix

• Local authentication
• VNC support for collaboration
• Backup file encryption
• Managing unidentified email addresses
• Emergency measures
• Notification Email IDs

• All Features of Standard Edition
• AD / Azure AD Sync - User groups & OUs
• Two-factor authentication - PhoneFactor, RSA SecurID, Google Authenticator, Duo security, YubiKey, Microsoft Authenticator,Okta Verify
• AD / Azure AD Sync - User groups & OUs
• User Sessions
• Trash Users
• IP Restrictions - API access and Agent Access
• Disable Password Resets for Privileged Accounts

Password Manager Pro Demo

• All features of Premium edition
• Remote SQL sessions with auto logon
• EAR support while using MS SQL as backend database
• CI/CD Platform Integration - Jenkins, Ansible, Chef, Puppet

Password Manager Pro Add-on Features

SSL/TLS Certificate Discovery:
• On-demand SSL Discovery
• Scheduled SSL Discovery
• SSL Discovery from SMTP servers
• Subnet Discovery
• Agent-based SSL Discovery
• Load Balancer Certificate Discovery
• CSR Process Management
• CSR Import
Public CA Integration:
• Integration with public Certificate Authorities (CAs): Sectigo (formerly Comodo), GoDaddy, Digicert, Symantec, Thawte, Geotrust, and RapidSSL

• All Features of Standard Edition
• Automated SSH Discovery
• Microsoft CA Auto Renewal
• CMDB Integration for SSL Certificate Synchronization

The latest PMP version is 11.1 (11103). If you are using an earlier version, you need to apply upgrade pack. How do I find my build number?

Download Upgrade Pack | Minor release (11103)

How Do I Find My Build Number?

Log in to Password Manager Pro. Next, click the user profile icon present on the top right corner of the web interface, and select 'About' from the dropdown menu. In the new window that opens up, you will find the build number mentioned below the version number. This is the build number of your currently installed Password Manager Pro.

Instructions to apply the Upgrade Pack

Windows (MySQL / PostgreSQL)

• Stop Password Manager Pro service and exit the tray icon.
  Note: In case you store the database_params.conf file at a different location, you will have to copy the file back to the original location (i.e. <PMP Installation Folder>/conf/ ) before performing the upgrade.
• Shut down Password Manager Pro service - both primary and secondary, if running. Also, make sure that postgres / mysql process is not running in task manager.
• Take a backup of the entire Password Manager Pro installation folder and store it in some other location. In case something goes wrong with the upgrade, you can revert back to this copy, with your settings intact. If you are currently using versions 8300 and above, follow these prerequisite steps before applying the upgrade packs.
• Now, right click on command prompt and run as administrator.
• Navigate to <PMP_Installation_Folder>/bin directory from CMD and execute UpdateManager.bat
• Click Browse and select the .ppm file that you downloaded. Then, Install.
• If you are applying multiple upgrade packs, do the following for each upgrade; exit the Update Manager, start & stop the PMP service once, and execute the upgrade steps.
• After applying the upgrade packs, start the Password Manager Pro service.
• In case you have to reconfigure HA and set up a fresh secondary instance of Password Manager Pro,
  follow the steps given in the help guide: MySQL | PostgreSQL

If you need any assistance or clarifications, please contact passwordmanagerpro-support@manageengine.com.

Prerequisite steps before applying the upgrade pack (Applicable only when upgrading from builds 8300 and later)

From builds 8300 and later versions, Password Manager Pro enforces a security best practice. So, before before proceeding with your upgrade, ensure you have performed the following steps:

• As a security precaution, Password Manager Pro will not allow using the username itself as the password anymore. System default admin and guest users who are using the username itself as the password will have to reset the passwords of their default accounts before proceeding with the upgrade pack installation process.
• To reset their local authentication passwords, system default admin and guest users should use the 'Change Login Password' wizard.

Role-specific steps to change the local authentication password:

• The new password should be compliant with the password policy assigned by your administrator. You can take the help of the password generator to generate a new password or type one yourself as per the policy.
• Make sure to remember your new password as it will NOT be emailed. If you have forgotten your password, use the 'Forgot password' link available on the login page of PMP to reset your password.
• Once you have reset, you can proceed to applying the upgrade pack.

Windows (MS SQL)

• Stop Password Manager Pro service and exit the tray icon.
• Shut down Password Manager Pro service - both primary and secondary, if running.
• Take a backup of the entire Password Manager Pro installation folder and store it in some other location. In case something goes wrong with the upgrade, you can revert back to this copy, with your settings intact. Additionally, take a backup of the Password Manager Pro database.If you are currently using versions 8300 and above, follow these prerequisite steps before applying the upgrade packs.
• Additionally, if you have configured High Availability, Password Manager Pro requires that the 'subscriptions' and 'publications' related to its replication data be deleted AND 'publishing and distribution' be disabled. To do so, log in to MS SQL Server management studio and delete the following files/folders as explained in the screenshots below: (If High Availability is not configured, skip these steps)

Prerequisite steps to upgrade to JRE 7 (Applicable only when upgrading from build 7000 to a later version)

Latest versions of Password Manager Pro (PMP) starting from 7000 run with JRE v7u51. So, if you are upgrading PMP from build 7000 to a later version, you need to first download JRE and follow the instructions below.

If you have installed PMP in Windows

1. Ensure that PMP server is not running. Shut down Password Manager Pro service - both primary and secondary, if running. Also, make sure that postgres / mysql process is not running in task manager.
2. Navigate to <PMP Installation directory>. You will see a folder named jre. Rename it as jre6.
3. Download the jre_windows_7u51.zip, copy the zip and paste it directly under <PMP Installation directory>.
4. Unzip the jre_windows_7u51.zip. This will create a folder named jre under <PMP installation directory>.
5. Now, navigate to the old jre6 (the one you renamed in step 2) available under <PMP-Installation-Directory>/jre6/lib/security/ folder. You will find a file named cacerts. Copy that file.
6. Now, navigate to the new jre available under <PMP-Installation-Directory>/jre/lib/security/ and paste the cacerts you copied in the previous step.
7. Now, run UpdateManager.bat and proceed with the upgrade.

If you have installed PMP in Linux

1. Ensure that PMP server is not running. Shut down Password Manager Pro service - both primary and secondary, if running. Also, make sure that postgres / mysql process is not running in task manager.
2. Navigate to <PMP Installation directory>. You will see a folder named jre. Rename it as jre6.
3. Download the jre_linux_7u51.zip, copy the zip and paste it directly under <PMP Installation directory>.
4. Unzip the jre_linux_7u51.zip. This will create a folder named jre under <PMP installation directory>.
5. Now, navigate to the old jre6 (the one you renamed in step 2) available under <PMP-Installation-Directory>/jre6/lib/security/ folder. You will find a file named cacerts. Copy that file.
6. Now, navigate to the new jre available under <PMP-Installation-Directory>/jre/lib/security/ and paste the cacerts you copied in the previous step.

1. Deleting Subscription
First, navigate to Replication >> Local Publications >> <Name of PMP database:PMP-HA>. You will see a file with <PMP server name>. <Name of PMP database>. Right click the file and press 'Delete' in the menu.

2. Deleting Publication
Then, navigate to Replication >> Local Publications >> <Name of PMP database:PMP-HA>. Right click the folder <Name of PMP database:PMP-HA> and press 'Delete' in the menu.

3. Disabling Publishing Distribution
Then, right click the 'Replication' folder and click the option 'Disable Publishing and Distribution'.

Once you have completed the above steps related to MS SQL server, you can proceed to applying the upgrade pack.

Applying upgrade pack

• Navigate to <PMP_Installation_Folder>/bin directory from CMD and execute UpdateManager.bat
  • During MS SQL server configuration for Password Manager Pro database, if you have opted for 'Windows Authentication,' you have to start the command prompt using the service account with which the Password Manager Pro service has been configured to connect to the SQL server (i.e. instead of running as administrator, run as the service account).
  • To identify whether a service account is used or an SQL account is used, navigate to <PMP_Installation_Folder>/conf directory and open database_params.conf file. If you do not find a username and password in the file, then Password Manager Pro is using Windows Authentication and therefore you need to run the command prompt with service account privilege.
• Click Browse and select the .ppm file that you downloaded. Then, Install.
• If you are applying multiple upgrade packs, do the following for each upgrade; exit the Update Manager, start & stop the PMP service once, and execute the upgrade steps.
• After applying the upgrade packs, start the Password Manager Pro service.
• In case you have to reconfigure HA and set up a fresh secondary instance of Password Manager Pro,
  follow the steps given here.

If you need any assistance or clarifications, please contact passwordmanagerpro-support@manageengine.com.

Linux(Headless)

• Stop Password Manager Pro service using the command /etc/init.d/pmp-service stop.
  Note: In case you store the database_params.conf file at a different location, you will have to copy the file back to the original location (i.e. <PMP Installation Folder>/conf/ ) before performing the upgrade.
• Shut down Password Manager Pro service - both primary and secondary, if running. Also, make sure that postgres / mysql process is not running in task manager.
• Take a backup of the entire Password Manager Pro installation folder and store it in some other location. In case something goes wrong with the upgrade, you can revert back to this copy, with your settings intact. If you are currently using versions 8300 and above, follow these prerequisite steps before applying the upgrade packs.
• Navigate to <PMP_Installation_Folder>/bin directory using terminal.
• Execute the command sh UpdateManager.sh -c (This will run the Update Manager in CLI mode)
• Now, press i to install. Supply full path of the upgrade pack and wait for the upgrade to complete until the message 'Service Pack applied successfully' is displayed.
• If you are applying multiple upgrade packs, do the following for each upgrade; exit the Update Manager, start & stop the PMP service once, and execute the upgrade steps.
• After applying the upgrade packs, start the Password Manager Pro service, using /etc/init.d/pmp-service start
• In case you have to reconfigure HA and set up a fresh secondary instance of Password Manager Pro,
  follow the steps given in the help guide: MySQL | PostgreSQL

If you need any assistance or clarifications, please contact passwordmanagerpro-support@manageengine.com.

Failover Service (FOS) Setup

In a failover service set up with two application servers bound to an MS SQL cluster, you can upgrade only the primary server; the other secondary server must be reinstalled and the failover service setup must be reconfigured.

Summary of steps to be followed:

1. Deactivate the failover service.
2. Upgrade the primary application server.
3. Reinstall the secondary application.
4. Reconfigure the failover service.

Deactivate Failover Service

You can deactivate the failover service either from the primary or the secondary server.

To uninstall:

1. Open a command prompt in any of the servers
2. Navigate to <PMP_SERVER_HOME>bin directory
3. Execute the command: UninstallFOS.bat

With this, the failover service will be deactivated. Next, you can uninstall Password Manager Pro application completely from the other servers.

Upgrade the primary application server

Password Manager Pros And Cons

You can upgrade your primary installation of Password Manager Pro by following the below steps. The latest upgrade packs are available for download here. You can use the instructions mentioned here to apply the upgrade packs one by one to reach the latest version. If MS SQL is configured as back end, do take a backup of database present in MS SQL Server.

Password Manager Pro Manageengine

Upgrade steps

Password Manager Pro Chrome Extension

• Stop the Password Manager Pro service and exit the tray icon.
• Navigate to <PMP_Installation_Folder>/bin directory from CMD and execute UpdateManager.bat
  • During MS SQL server configuration for Password Manager Pro database, if you have opted for 'Windows Authentication,' you have to start the command prompt using the service account with which the Password Manager Pro service has been configured to connect to the SQL server (i.e. instead of running as administrator, run as the service account).
  • To identify whether a service account is used or a SQL account is used, navigate to <PMP_Installation_Folder>/conf directory and open database_params.conf file. If you do not find a username and password in the file, then Password Manager Pro is using Windows Authentication and therefore you need to run the command prompt with service account privilege.
• Click Browse, select the .ppm file that you downloaded and install.
• If you are applying multiple upgrade packs, do the following for each upgrade; exit the Update Manager, start & stop the PMP service once, and execute the upgrade steps.
• After applying the upgrade packs, start the Password Manager Pro service.

Password Manager Pro Reviews

Reinstall on the secondary application server

After upgrading the primary server to the latest version, you should reinstall the same version of Password Manager Pro on your secondary server. In short, ensure that both your primary and secondary servers run the same Password Manager Pro version at all times. You can download the required installation files from the upgrade pack table at the top.

Reconfigure FOS service

After reinstalling the secondary server, you can perform the steps detailed in the failover service help documentation to configure failover service in the secondary application server again.