Security Testing and Evaluation Labs
Security Evaluation Laboratory (SEL)
CA: eTrust™ Admin v8.0
| Sponsor: | Computer Associates |
| Point of Contact: | Joshua Brickman Phone: (508)628-8917 |
| Assurance Level: | EAL2 |
| Status: | Evaluated |
eTrust Admin is a tool for managing users across multiple, geographically dispersed systems. Whether you need to manage accounts, group memberships, or other resources, eTrust Admin spans diverse systems, and heterogeneous databases so you can manage it all. This software solution simplifies user administration by providing you with a powerful user provisioning system.
Distinctive Features:
- Role-based User Administration Through role-based administration, eTrust Admin manages users according to their job function. Administering users in this manner controls the access that users need across diverse systems.
- Directory Integration eTrust Admin is a directory-enabled application. It uses eTrust Directory, a fully standard compliant X.500 directory, to store its information.
- Wide Range of Environments Supported eTrust Admin can administer a wide range of environments, such as security and network operating systems, groupware applications, databases, and Enterprise Resource Planning (ERP) applications. This includes an LDAP option for interfacing to Lightweight Directory Access Protocol (LDAP) directories, enabling integration with any LDAP-enabled directory, application, or ERP.
- Integration with Other eTrust Products eTrust Admin can be integrated with a wide range of eTrust products, including eTrust Directory, eTrust Web Access Control, eTrust Access Control, eTrust Single Sign-On, eTrust PKI, and eTrust Audit to provide the total, integrated security solution for today's and tomorrow's eBusinesses.
- Distributed Administration eTrust Admin lets administrators work within a scope so they have access to only the objects they manage, thereby improving productivity and security among all administrators.
- Password Synchronization eTrust Admin lets users change their passwords on any managed Windows machine. After the password is changed, eTrust Admin automatically updates the passwords for all other accounts that a user has.
- Intuitive Manager Interface Administrators can use the feature rich graphical user interface (GUI) called the Manager. The task based Manager conceals system differences and complexities by providing a consistent way of performing tasks on these systems while presenting information in an intuitive manner that accommodates managing large-scale environments, which reduces training costs and improves productivity.
- Web-based Administration Administrators and users can
perform selected tasks using the Web Interface or the
User Provisioning Workflow Interface. Some examples are:
- Self-service administration reduces calls to the help desk because users can register themselves within eTrust Admin, reset their passwords, and manage their personal profiles.
- Automatic requests let users request access to new systems or applications through the interface and automatically receive all the necessary approvals before the change is made in eTrust Admin.
- Auditing and Reporting Administrators can log all changes to a central point. Once changes are logged, they can generate reports and distribute them to management.
- Command Line Interface Administrators can use the Batch Utility to perform the same tasks in the Manager. This command line interface is useful when you need to perform repetitive and time-consuming tasks because you can perform the tasks offline or in the evening hours.
- Software Development Kit The eTrust Admin SDK contains development tools that let you build agents for any Computer Associates component or any other third-party software so you can manage these environments also.