Question 1

What are the basic technical requirements to implement FastPass Sync for IBM AS/400 in our organization?

Accepted Answer

The fundamental requirement for FastPass Sync for IBM is a single Virtual Windows server (versions 2019-2022). Additionally, FastPass Interceptor needs to be installed on all Domain Controllers to facilitate Windows password interception.

Question 2

Is it necessary to install any special software on IBM AS/400 iSeries systems for FastPass?

Accepted Answer

No special software installation is required on IBM iSeries / AS400 systems for FastPass. FastPass connects to these systems via the remote command port, facilitating seamless integration without the need for additional software installations.

Question 3

What are the requirements for integrating FastPass with IBM AS/400 iSeries?

Accepted Answer

For effective integration with IBM iSeries, FastPass requires the OS/400 version V4R5 or above. Additionally, a dedicated service account needs to be set up to enable FastPass's connection to the system. It's also important to ensure that the Password Level on the iSeries system is set to at least level 2 to facilitate proper synchronization with FastPass.

Question 4

How does FastPass facilitate password resets for IBM Z/OS?

Accepted Answer

The method used by FastPass to reset passwords for IBM Z/OS depends on the specific system setup. Generally, we utilize either an LDAP connector or an SSH connector. The choice between these two options is based on the infrastructure and requirements of the IBM Z/OS environment in question. Contact us for a quick review of available options.

Question 5

What is the typical duration for password synchronization using FastPass?

Accepted Answer

In most cases, password synchronization with IBM systems through FastPass is completed in under 15 seconds. This duration can vary depending on factors like hardware specifications, the number of users, and the number of target systems. During peak times, such as Monday mornings following a holiday break, synchronization may take slightly longer, typically ranging from 30 seconds to 1 minute, due to higher system loads.

Question 6

Is it possible to fully align the password policies of Active Directory and IBM i Series?

Accepted Answer

Completely aligning the password policies between Active Directory and AS400 is not always feasible due to certain inherent differences. However, with FastPass Password Filter, these discrepancies can be effectively managed, ensuring smoother operation. For FastPass Sync customers, this filter is provided free of charge.

Question 7

Our usernames in the IBM system and Active Directory are not the same can FastPass handle that?

Accepted Answer

Yes, FastPass has a user mapping engine for that exact purpose. Usually this is the case, either for some or all users. Sometimes we can make the mapping manually using Active Directory data, a different field, email address, UPN name or parts of the SAMAccountname. In other cases we get data from an Identity System and in yet other cases we get data from SAP and map on e.g. Email address. Contact us to find the right solution.

Question 8

How many target IBM instances can FastPass handle?

Accepted Answer

The FastPass Sync engine is built for load, spawning out multiple threads to handle load. We have customers with over 95 target systems.

Question 9

Will FastPass Unlock the IBM account?

Accepted Answer

By default, FastPass will unlock the account.

Question 10

What happens if the IBM system is down while the FastPass Synchronization engine is running?

Accepted Answer

FastPass is equipped with a resilient retry system for such scenarios. By default, it will attempt to retry the synchronization process 10 times, with a 2-minute interval between each attempt. These retry settings are adjustable to better suit your specific environment. Moreover, in instances where the IBM system experiences an extended downtime, FastPass provides an option to manually trigger a synchronization for a chosen time interval. However, this feature needs to be enabled, as it involves data deletion considerations.

Question 11

What impact does a downtime in an IBM system have on FastPass's Sync process?

Accepted Answer

FastPass is designed for robustness and stability, ensuring that a downtime in one system does not halt or significantly slow down the overall synchronization process. Instead, only the synchronization with the affected system will be subject to retries as outlined previously. This ensures that the synchronization with other systems continues unaffected.

Question 12

Does FastPass meet FIPS 140-2 compliance standards?

Accepted Answer

Absolutely, FastPass is fully compliant with FIPS (Federal Information Security Management) 140-2 standards, starting from version 4.0 onwards. We utilize a 256-bit AES algorithm for encryption and a PBKDF algorithm for hashing. This compliance extends across all FastPass components, from the Windows Client to the Server and Domain Controller parts, ensuring robust security throughout the system.

Question 13

Has FastPass received Cyber Essentials Plus certification for its cloud operations?

Accepted Answer

Indeed, FastPass's cloud operations are proudly certified with Cyber Essentials Plus, affirming our commitment to robust cybersecurity practices.

Question 14

Does FastPass have a feature to automatically delete outdated user data?

Accepted Answer

Yes, FastPass provides the functionality to automatically delete user data and restrict access as needed. This is achieved by FastPass regularly checking the source user repository. User data can be set to be automatically deleted under certain conditions, such as if the user account is deleted or disabled, is no longer a member of a group authorized to use FastPass, or becomes a member of a group specifically designated for deletion. This ensures that user data management aligns with the current status and permissions within the organization. Please note that the users history actions are kept in the Audit log.

Question 15

Does FastPass offer a list of prohibited passwords to guide users in creating secure passwords?

Accepted Answer

Absolutely, FastPass includes a customizable list of prohibited passwords to help enhance security. We provide a top list of commonly used weak passwords that we recommend you utilize as a starting point. Additionally, it's a good practice to expand this list by adding specific terms related to your company, such as the company name, product names, and other relevant terms. This approach helps ensure users avoid common and potentially vulnerable passwords, thereby strengthening overall password security.

Question 16

Does FastPass maintain a log of historical actions and activities?

Accepted Answer

Yes, FastPass features a comprehensive and detailed audit log that meticulously records every action. This includes not only user activities but also all operations conducted within the Help Desk tool and the Admin interface. This extensive logging capability ensures thorough tracking and accountability for all interactions within the FastPass system, providing an essential tool for security and administrative oversight.

Question 17

Is the FastPass solution GDPR/ CCPA compliant?

Accepted Answer

All personnel supporting FastPass cloud are as a minimum are BPSS checked and are annually trained on Data Protection and personal data best practice. They are also required to sign NDAs and the Information Security Policy and Data Protection policy. These policies are aligned with ISO 27001 / EU GDPR. Read more about GDPR and the Service Desk.

Question 18

Does FastPass encrypt data during transit?

Accepted Answer

Absolutely. FastPass prioritizes data security, especially during data transit. One of our fundamental security measures is the mandatory use of SSL (Secure Sockets Layer) certificates for all communications. This ensures that any data exchanged between users and FastPass is encrypted, significantly enhancing security and protecting against data interception or unauthorized access during transmission. For Cloud operation TLS 1.2 is used.

Question 19

Does FastPass ensure encryption of data when it is at rest?

Accepted Answer

Yes, FastPass ensures that all sensitive data is encrypted when stored in our database. This includes any data at rest within the FastPass system, providing an added layer of security against unauthorized access. For specific details on the types of data that are read, stored, and require write access within Active Directory and Entra ID, we recommend consulting the respective documentation. This information will give you a comprehensive understanding of our data handling practices and the security measures in place to protect your data at all times.

Question 20

Is FastPass Synchronization from Active Directory compatible with LSA Protection?

Accepted Answer

Yes, FastPass is fully compatible with LSA Protection. The FastPass Interceptor and Password Filter components are signed by Microsoft, ensuring compliance and functionality with LSA Protection enabled. Adhering to the Microsoft Security Development Lifecycle (SDL), FastPass integrates seamlessly with the Local Security Authority Server Service (LSASS), allowing for safe and secure password synchronization in environments where LSA Protection is applied.

Question 21

Is it possible for FastPass to synchronize passwords from Entra ID (Azure AD)?

Accepted Answer

FastPass does not support direct password synchronization from Entra ID (Azure AD) to other systems. This is because password synchronization requires identical hashing methods, a process currently specific to Microsoft's synchronization between Entra ID and Active Directory. However, FastPass offers alternative password management solutions, such as the Selective Password feature, where users can set passwords for one or more systems via the FastPass web portal.

Question 22

How often are updates and security patches released for FastPass, including its server and client components?

Accepted Answer

FastPass ensures regular updates for optimal performance and security. For the server components, such as the SSPR backend and IVM, we typically release a major version upgrade once a year. Additionally, we provide 2-3 smaller updates annually, focusing on introducing new features and addressing bug fixes. It's important to note that the Windows Client, along with the Password Interceptor and Filter components, are designed to be backward compatible with the latest two major versions. This compatibility feature offers flexibility and ease during the upgrade process, ensuring a smooth transition for users and IT administrators.

Question 23

What is FastPass's End-of-Life (EOL) policy for its software versions?

Accepted Answer

FastPass adopts a version-based approach for our End-of-Life policy, focusing on Major and Minor releases. We offer support for the current Major release and the last officially released Major version. For instance, as of now, we support versions 3.6 and 4.0. This means that if you encounter any issues with version 3.6, our support team will assist you, including making necessary fixes to facilitate upgrades. However, we do not provide the same level of support for versions that are two Major releases behind the current one. To ensure continuous support, we recommend upgrading at least once every year, aligning with our Major version release cycle.

One password across all applications

Synchronize passwords from Windows / AD / Azure AD to IBM Z / RACF and IBM i AS/400

When a Windows/AD password is changed FastPass synchronizes the password to all the user’s IBM AS/400 systems

Some organizations have specialty needs when it comes it to giving users a solution where they can specifically reset or unlock an IBM AS/400 password.

Easy to use self-service portal for all systems

Direct IBM AS/400 password reset

For the IBM AS/400 System from FastPass Web Portal

Reduce workload in your Help Desk and strengthen security

HOW IT WORKS

IBM Password Reset Tool Pricing

FastPass V4 - Secure Enterprise Passwords

Frequently Asked Questions

"The number of forgotten passwords per involved user per year has dropped from 1.6 to 0.3. This is an improvement of 83%!"

Receive an individual and specific overview of FastPass pricing