Hideez Enterprise Server (HES)

The Hideez Enterprise Server (HES) software is designed to manage the enterprise's Hideez Key devices and the information stored in them about corporate credentials and employee passwords. Depending on the requirements of the enterprise, there is a local version of HES for installing and working with MS Windows compatible systems, and in the format of cloud management services. The use of HES allows you to monitor the corporate use of Hideez devices and involves the "binding" of all Hideez Key devices to the enterprise and users of the enterprise to ensure their safe authorized use through centralized administration and security control. The main functions of HES is to simplify administration of the processes of management and integration of Hideez Key devices of the enterprise, both in the existing administration environment and when deploying the enterprise from scratch. Among the main functions of HES can be identified such: a customized catalog of enterprise IT resources compatible with LDAP catalogs, configurable roles of HES users, management of users and their roles, management of Hideez Key devices owned by the enterprise, including the ability to remotely block and remove Hideez Key, applying policies security. Main features:

• User's accounts administration. Remote locking and wiping of Hideez Key devices in case of emergency.
• Remote management of corporate credentials, stored on employee's devices.
• Strong passwords: convenient generation of  passwords and One-Time Password secret keys for WEB- and native apps , and its secure delivery to Hideez Key.
• Integration into LDAP system, e.g. Active Directory, users import and LDAP authorization.

Purpose of Hideez Enterprise Server:

• To solve "secure delivery of password to End User" problem. All the credentials are sent via end-to-end encrypted channel and can't be intercepted.
• To manage credentials (adding, removing or changing) on employees Hideez Keys remotely.
• To control password's policy compliance (complexity, expiration or so) and reset them forcibly.
• To implement strong authorization: deploy long keystrokes (unknown for users) instead of weak passwords.
• To minimize human factor risks of credentials compromise and eliminate the possibility of password revealing to the third parties