...

If you are using an account that requires a password or private key, these secrets must be kept safe. These secrets should not be stored in an unencrypted file or on a piece of paper under your keyboard! Using a password safe is one good option. For security keys, you can also consider using a key management solution that has more features to manage the full key “lifecycle”. Western has a service from Microsoft, Azure Key Vault, that functions as a hardware security module, or HSM. You can open a ticket with ATUS if you want to learn more. Whatever solution you use, make your secrets are protected using industry standard and current encryption algorithms. Lastly, access Western has an enterprise agreement for 1Password, and there is a low monthly cost. Good password managers like 1Password allow users to view, store and delete keys should be auditable, and your storage solution should support . They are also support auditing and versioning.

Informational Resources

...