RSA Security CONTROL-SA User Manual

RSA SecurID Ready Implementation Guide

Last Modified 02/04/2004

1. Partner Information

Partner Name BMC Software
Web Site http://www.bmc.com/
Product Name
Version & Platform CONTROL-SA 3.x
Product Description CONTROL-SA is the foundation for secure identity management. It is a

Product Category User Management

CONTROL-SA/Agent for RSA ACE/Server

solution for centrally managing users’ information and access across the
various distributed security systems in the organization. CONTROL-SA
integrates with numerous systems and applications via CONTROL­SA/Agents. CONTROL-SA/Agent for RSA ACE/Server is designed to
integrate CONTROL-SA with RSA SecurID system by allowing bi­directional management of SecurID security entities between CONTROL­SA Enterprise SecurityStation (ESS) and RSA ACE/Server.

Internal and External Users

Directory
Services

Mid-range/OS

Applications

Databases

Mainframe

1

2. Contact Information

Maya Malevich BMC Support
Email [e-mail] [e-mail]
Phone [phone]
Web www.bmc.com www.bmc.com

Sales Contact Support Contact

3. Solution Summary

Feature Details

Support for Standard Card, Key Fob, PINPAD, and SoftID

Add a user to the ACE/Server Database

Modify user information
Assign a token
Un-assign a user’s token
Delete a user from the ACE/Server

Database
Clear a token’s PIN
Enable a token
Disable a token
Reconcile ACE/Server Database

Users with the User Management
database

Yes (Manage Tokens as resources)

Yes

Yes
Yes
Yes
Yes

Yes
Yes
Yes
Yes (Several mechanisms are available:

Download for all ACE/Server users and groups,
Global Synchronization, and periodic
Interception of changes)

CONTROL-SA Enterprise

Security Station (ESS)

SA-Agent

RSA

ACE/Server

2

4. Product Requirements

Hardware requirements

Component Name: CONTROL-SA/Agent for RSA ACE/Server on Windows

CPU make/speed required Any hardware configuration supported by Microsoft Windows operating

system (e.g., Intel Pentium processor).
Memory 128 MB RAM
Disk space 32 MB of available disk space required, preferably on the local drive
Installation device CD-ROM drive

Software requirements

Component Name: CONTROL-SA/Agent for RSA ACE/Server on Windows
Operating System Version (Patch-level)

Windows NT 4.0 (Server and Workstation)
Windows 2000 (Server and Advanced Server)

Windows Server 2003
RSA ACE/Server 5.0.1
RSA ACE/Server 5.1
RSA ACE/Server 5.2

5. Partner Configuration

Installation Prerequisites

Note: For a comprehensive list of all Installation Prerequisites, and Hardware and
Software requirements, consult the CONTROL-SA®/Agent for RSA ACE/Server®
Administrator Guide

• CONTROL-SA/Agent for RSA ACE/Server should be installed on the same machine
running the RSA ACE/Server managed.

• Administrative Software: it is required to install and configure CONTROL-SA Enterprise
SecurityStation (ESS), version 3.1.00 or above, as specified in the CONTROL-
SA®/Agent for RSA ACE/Server® Administrator Guide.

CONTROL-SA ESS allows central user management of RSA SecurID together with other
security systems across the organization.

Product Configuration

The following is a basic overview of the necessary steps to Install and Configure the CONTROL­SA®/Agent for RSA ACE/Server:

3

1. Install and configure CONTROL-SA ESS (Enterprise SecurityStation) – as described in
the relevant installation, administration and user guides.

2. Install and configure CONTROL-SA/Agent for RSA ACE/Server – as described in the
CONTROL-SA®/Agent for RSA ACE/Server® Administrator Guide.

3. Configure ESS to integrate with CONTROL-SA/Agent for RSA ACE/Server – as
described in the ESS administrators’ guide.

4. Perform initial download to retrieve RSA SecurID users and groups.

5. Load resources to retrieve RSA SecurID tokens.

Note that the procedures above are a general overview of the appropriate configuration steps. For
comprehensive information on installing the Install and Configure the CONTROL-SA®/Agent for RSA
ACE/Server, consult the CONTROL-SA®/Agent for RSA ACE/Server® Administrator Guide.

4

Example Screenshots

The following screenshots are intended to demonstrate some of the functionality of the BMC CONTROL­SA®/Agent for RSA ACE/Server®:

SecurID Group Membership:

5

SecurID Token Management

ACE/Server User Management

6

6. Certification Checklist

Date Tested: 11/11/2003

Product Tested Version

ACE/Server 5.1.00
ACE/Agent 5.5.0.117
CONTROL-SA/Agent for RSA ACE/Server 3.1.07

Test

1st time connection to ACE/Server Database

User Management Add a user P

Modify a user’s information P
Assign a token P
Un-assign a token P
Assign a password P
Un-assign a password P
Enable a user’s token P
Disable a user’s token P
Clear a user token’s PIN P
Delete a user P
Activate a user on a client** N/A
De-Activate a user on a client** N/A
Add a user to a group P
Remove a user from a group P

No ACE/Server

P

N/A

Pass

Fail

JEC *P=Pass or Yes F=Fail N/A=Non-available function

** CONTROL-SA/Agent for RSA ACE/Server currently does not include management of clients. However,
this is in the work plan for future versions.

7. Known Issues

There are no known issues.

7