Cyber-Ark Password Vault
Strengths: Efficient in its approach to maintaining more sensitive passwords in a secure fashion
Weaknesses: Requires two pieces of hardware, which adds to overall cost of ownership. Support not as available as it should be
Verdict: Cyber-Ark Password Vault delivers exactly what it promises
The Cyber-Ark Password Vault software is another example of implementing a subset of identity management features with a focus on simplicity. This program is designed to provide a secure vault for non-personal passwords, for example those used for firewall administration, router configuration and Linux/UNIX root. These passwords can be stored in a secure encrypted vault file on the Cyber-Ark server.
The software is intended to be broken up between two physical hardware devices. The default installation of the vault software will install a personal firewall that will block all traffic not coming from the Cyber-Ark client.
The Cyber-Ark Password Vault was easy to install with a wizard guided setup. No additional configuration changes were necessary to the underlying Windows 2003 system. The software made all the changes needed to the system.
Documentation came in the form of indexed and searchable PDF files. Most common topics were easy to find, with good solutions provided. A quick-start guide was included, which made the installation quite easy.
Support for the CyberArk products was difficult to find. There is little available through the company's website and common self-support options such as a knowledgebase or FAQ are absent unless you purchase a maintenance plan. CyberArk offers two of these at extra cost. The Maintenance Plus plan includes 24/7 support through the knowledge base and the support vault, as well as updates and phone support during normal working hours. The Maintenance Plus 24/7 plan adds round-the-clock phone and email support.
We were disappointed with this approach, given that it is likely that at some point an administrator will have a problem that needs to be solved immediately, since the nature of the passwords being protected is critical. We thought that the support elements of the lesser plan would do well to be openly available or, at least, open to any registered user.
Priced at the upper end for identity management products, the Password Vault product is definitely targeted at enterprise installations.