Centrify Express72 Jump Start Upgrade Service

Transcription

1 CENTRIFY DATASHEET JUNE 2015 Centrify Express72 Jump Start Upgrade Service Summary This Jump Start package streamlines the migration from Centrify Express Edition for UNIX and Linux to Centrify Server Suite, Standard Edition in three days. Completion of this package will establish a baseline for future migrations while implementing Centrify s proven best practices, automation, and privilege management. Why Migrate to Centrify Server Suite, Standard Edition? Hierarchical Zones make it easier to manage Linux and UNIX identities with inheritance capabilities that reduce the need to duplicate policies that control access and privileges. Flexibility in the management model is simultaneously improved with hierarchical Zones through the ability to use overrides at any level within the hierarchy. Centrify Server Suite, Standard Edition also introduces Computer Roles, which simplify the assignment of privileges across servers. For example, you might create a Computer Role for web servers, which gives your web developers consistent access rights and privileges to web servers across your enterprise. To granularly control what users can do on what systems based on their job function. Centrify Server Suite, Standard Edition provides flexibility in the implementation and management of a least-privilege access model through role definitions and assignments that can be inherited or overridden at any level (or Zone). Repeatable and sustainable compliance with comprehensive reporting that combines who has access to servers with the privileges they have on those servers. Benefits of the Express72 Jump Start Upgrade Service Centrify Professional Services provides the expertise and best practices, acquired through hundreds of successful deployments. The Express72 Jump Start is the sort of intense, hands on, direct process approach where our experienced PS Consultant helps you build out the recommended back end, optimal configurations and design methodology, delegated administration points, automated deployment, automated provisioning and de-provisioning and proof of design on an actual pilot system. Your organization will benefit from a hands-on training workshop, implementation of best practices, and reducing your overall trial and error process to a streamlined proven approach. Our proven processes are flexible enough to handle a small single day migration and yet scalable enough to also handle a complex global enterprise level deployment. Training Workshop where the consultant will explain significant differences between your current Express Software and the capabilities and enhancements you ll have upgrading to our Centrify Server Suite, Standard Edition Software. Realize cost savings and reduce human error through automation of common tasks for controlling access and privileges

2 Improve enterprise security by replacing sudoers with consistent management and enforcement of security policies across your cross-platform enterprise Reduce administration costs through optimized role definitions and role-assignment Increase user productivity with seamless privilege elevation Service Scope Up to five Linux/UNIX systems will be migrated from Express Edition, up to three hierarchical Zones will be considered, and up to three Linux/UNIX roles will be configured in DirectAuthorize. All Windows Server Suite management components such as the Zone Provisioning Agent, Deployment Manager, and Access Manager Console will be deployed to a single host for this engagement. Engagement Management Engagement management provides end-to-end oversight and management to ensure successful service delivery and on-site trainings. Centrify s engagement management adds dedicated resources that provide the following essential elements to your project: Management focus and expertise Quality control and management Cost management Your Centrify engagement manager will ensure your staff, change control processes and equipment are prepared for Centrify staff to work productively and efficiently on-site so projects are completed on time and with the highest quality levels. Deliverables As part of the service, you will receive the following: A Training Workshop providing an overview of Hierarchical Zone Capabilities and design. A custom workshop on additional functionality in Standard Edition and Centrify s best practices Overview of DirectAuthorize configuration and management of privileges. A backend organizational structure that will provide separation of duties, single profile access to Unix/Linux systems, and a process that allows automated user provisioning, role based access and privilege management, as well as flexible and granular access controls. Duration Duration is 3 consecutive business days at customer facility. Who Should Participate Linux/UNIX, Windows, Security and System Administrators. If a project or change manager, or business representative is assigned to the project, they should also attend CENTRIFY CORPORATION. ALL RIGHTS RESERVED 2

3 Prerequisites Prior to the Centrify Consultant arriving, a designated virtual host should be made available. The purpose of this host is to serve as a Deployment Server. The Deployment Server Requirements include the following: -.NET Framework version 3.51 SP1 - Network connectivity to all in-scope Unix, Linux, or Mac OS-X systems - Hardware: 4GB RAM, 2GB Free Disk Space, and a 2GHz Processor All Centrify Server Suite, Standard Edition Software must be copied to the Deployment Host where we will be doing most of the Administrative work from. We recommend creating a [C:\Centrify] directory to copy the software to. We can help customize this offering if your organization has more than 100 deployed UNIX systems running Centrify Express Edition for UNIX and Linux. Customer personnel will require root or equivalent access for all systems in scope of the deployment, and the privileges to install software on Windows computers that may require configuration, or administration using the Centrify DirectManage consoles, including the Deployment Server. If outages or change control requests are required then these must be scheduled in advance A signed Statement of Work Format Daily interdisciplinary design sessions held at the customer s location, access to white boards and a lab environment for collaborative and interactive sessions. See Daily Overview for details. Logistics This package is delivered on-site only. The project room should be equipped with an LCD projector and a whiteboard with dry-erase markers, and a printer should be available. Customer participants will require direct network access. Pricing and Ordering This offering is invoiced on purchase and is valid for 6 months from the date of purchase. Contact your Centrify Sales representative for pricing details for your region and to arrange for a time, place, and schedule. Customizations The Centrify Professional Services team has the skill and expertise to handle or assist with many implementation customizations where needed. If there are extra implementation tasks that are required, custom scripting needs, custom integration requirements, or any other technical services that will be useful to customer success with Centrify, our services team can set up a pre-sale scoping call to provide custom implementation estimates to fulfill these needs CENTRIFY CORPORATION. ALL RIGHTS RESERVED 3

4 Daily Overview Day Description 1 Centrify Professional Services and your personnel review the existing Centrify Express Edition deployment in your network environment focusing on specific Active Directory OU Structure and Permissions. Discussions with key personnel around user provisioning, Active Directory, UNIX, Security, and auditing or compliance Review of privilege management of local accounts and associated compliance / auditing risks Design review of existing implementation and Active Directory storage structure 1 Custom training workshop on additional functionality and Centrify s best practices for the current Centrify Server Suite, Standard Edition Design best practices for OU structure, delegation, separation of duties and automation The Zone Provisioning Agent, DirectAuthorize Roles, Global access, Zone-level access, Computer Overrides, and Computer Groups. The process of migrating to Hierarchical Zones for an optimized design. 2 Management components installed on Windows Deployment Server The Centrify Server Suite, Standard Edition Access Manager Console current product release installed on the Deployment Server. Deployment Manager current product release installed on Deployment Server Deployment of the Zone Provisioning Agent to the most current product release Run CreateOU Script (Powershell) Configure Console(s), build out Global Zone and Child Zone User Import Pre-Create (with prefix or suffix) Computer Object Configure DZ Role(s) for Access and Privilege Demo Show Effective Unix Users tool Deployment Manager, Discover, Analyze, Review, and Push Software Configure Computer Role 3 Non-invasive migration of UNIX data in Active Directory Join system to child zone (Active Directory) Test access control, test privilege execution, and confirm POSIX attributes. Configure and test automation (ZPA) SCRIPT Computer Role buildout SCRIPT User Role buildout DEMO script Review knowledge transfer for customer to build their own documentation CENTRIFY CORPORATION. ALL RIGHTS RESERVED 4

5 About Centrify Centrify strengthens enterprise security by managing and securing user identities from cyber threats. As organizations expand IT resources and teams beyond their premises, identity is becoming the new security perimeter. With our platform of integrated software and cloud-based services, Centrify uniquely secures and unifies identity for both privileged and end users across today s hybrid IT world of cloud, mobile and data center. The result is stronger security and compliance, improved business agility and enhanced user productivity through single sign-on. Over 5000 customers, including half of the Fortune 50 and over 80 federal agencies, leverage Centrify to secure their identity management. Learn more at Santa Clara, California: +1 (669) sales@centrify.com EMEA: +44 (0) Web: Asia Pacific: Brazil: Latin America: Centrify is a registered trademark and Centrify Server Suite and Centrify User Suite are trademarks of Centrify Corporation in the United States and other countries. All other trademarks are the property of their respective owners. Copyright Centrify Corporation. CCS-CS-E72JS CENTRIFY CORPORATION. ALL RIGHTS RESERVED 5