News

IBM Security Role and Policy Modeler Announcement
IBM delivers market leadership by integrating role modeling and lifecycle management into IBM Tivoli Identity Manager V5.1, helping customers accelerate their Identity and Access Governance.

IBM has announced a manufacturing refresh of IBM Tivoli Identity Manager V5.1 that includes a new role mining and role lifecycle management capability, IBM Security Role and Policy Modeler (RaPM). The new functionality built into IBM Tivoli Identity Manager V5.1 helps organizations reduce the time and effort needed to design a role and access structure for the enterprise. It offers a business-centric approach to data gathering, analysis of patterns, and an IBM-Research-based Role Mining algorithm that gives business users the flexibility to create an effective role structure for the organization.

Learn more. Or listen to the Global Tivoli User Community Oct. 19th webcast replay Security Best Practices: Managing Threats in the Digital Age

Eight IBM Security Solutions named Finalists in 2012 SC Computing awards
Tivoli Identity and Access Assurance was named the Best Identity Management solution and has been named a Finalist in the same category for 2012!

For 2012, we are delighted to announce that IBM has been named a Finalist in the eight categories shown below. Being named a Finalist in this many categories is a testament to IBM's leadership in security.

IBM IMS 12 Transaction and Database Servers deliver savings you can count on 211-365

IBM Tivoli Identity Manager V5.1 update helps organizations simplify the design and implementation of role and access structure across the enterprise 211-420

IBM Security zSecure suite V1.13 extends application compliance management and audit reporting capabilities and helps simplify and reduce costs to administer IBM System z security 211-432

ADAPTER AND FEATURE UPDATES FOR IBM TIVOLI IDENTITY MANAGER

IBM Tivoli Identity Manager (TIM) V5.1 is a secure, automated and policy-based solution that helps manage user identities throughout their lifecycle across both legacy and e-business environments. TIM is part of the Identity and Access focus area of the IBM Security Solutions portfolio. For more information on IBM Security Solutions, visit http://www.ibm.com/security/

TIM V5.1 Maintenance Release - New Features
The latest Fixpack release (ITIM 5.1.0.8) contains three key customer-requested usability and security features:

• Recertification available via API: Recertification policies can now be created, modified, deleted, and rescheduled through new ITIM Java APIs. New JavaDoc and example code has also been included to accelerate customer use of these APIs.
• Improved Self-approval prevention: Now TIM optionally prohibits users from approving requests made for them, in addition to existing prohibition on self-approval. So if Jane requests an entitlement for Jorge, and Jorge is a member of a management approval group receiving such requests, Jorge, as part of that group, cannot approve his own entitlement. This is an optional global setting that applies to all requests.
• Minimum password reset interval. Now there is an optional minimum password reset interval, in addition to the existing password timeout reset. So, for example, not only could the user be forced to reset their password every 90 days, but they also could be prohibited from resetting it several times in one day. This is typically used to prevent a user from resetting their password multiple times to bypass the password reuse limits (for example, if there were a rule that you can't reuse any of the prior 5 passwords, the user could change their password 6 times in a row to come back to the password that just expired).

Adapter updates
Tivoli Identity Manager provide an interface between a managed resource and TIM. TIM adapter updates are released every quarter. The complete list of TIM V5.1 adapters can be found at: http://www.ibm.com/support/docview.wss?uid=swg21396546

The following is a list of adapters newly released or updated during Q3:

NEW ADAPTERS FOR TIM V5.1:

• Command line interface adapter (Cisco ACS): A new TIM 5.1 Command Line Interface Adapter is available. This new adapter targets simple endpoints, that can be managed by calling a command-line program (batch file, Perl script, Unix Script, etc.), without need for TDI adapter customization. Initially, the adapter provides a tested sample script for the Cisco Access Control System, but custom scripts for other target systems can be developed.

OTHER Q3 ADAPTER UPDATES:

• SAP/Netweaver: The current SAP/NetWeaver adapter has been enhanced to add an SAP GRC extension enabling SAP account provisioning from TIM to take advantage of SAP GRC (the former Virsa product) features. The GRC extension is an optional feature to the SAP NetWeaver adapter.
• Siebel: now supports Siebel 8.0
• PeopleSoft: now supports PeopleTools 8.51
• Sybase: now runs on Windows Server 2008 64 bit
• Documentum: now supports Documentum 6.7 and agentless deployment
• Groupwise: now supports agentless deployment
• CA Top Secret: can now unlock an account when it has been locked due to wrong password attempts, and supports the option "ACID under which requests will be processed"
• Rational Jazz Server: now supports Jazz Team Server (JTS)/Rational Team Concert (RTC) 3.0. With the 3.0 release, Rational introduced a Jazz Team Server (JTS) layer that manages multiple RTC servers from the JTS layer. Our adapter now manages users from the JTS layer - one TIM service can now manage many RTC instances through the JTS layer.
• Tivoli Access Manager for e-business Combo adapter - significant reconciliation performance improvement when using Tivoli Directory Server and TAMeb V6.1.1
• UNIX/Linux: bug fixes and minor customer-specific updates. See the release notes on the adapter page above for further details.

Note: the adapter updates described in this sales alert apply to TIM V5.1. Customers on prior versions/releases of TIM are encouraged to move to TIM V5.1 in order to stay current with the latest capabilities.

TIM 4.6 Support Ends
As a reminder, IBM Tivoli Identity Manager V4.6 has passed its announced End of Support date effectively September 30. No further enhancements, platform updates or adapter updates will be released for this TIM version. Only customers with special extended support contracts will continue to receive technical support.

New IBM Redpaper for Tivoli Access Manager for Enterprise Single Sign-On

• A new IBM Redpaper, A Guide to Writing Advanced Access Profiles for IBM Tivoli Access Manager for Enterprise Single Sign-On examines how to integrate web-based applications into Tivoli Access Manager for Enterprise Single Sign-On by using its AccessProfile technology.
  
  This IBM Redpaper is a good resource for security administrators who are responsible for configuring and integrating Tivoli Access Manager for Enterprise Single Sign-On into their organization's IT infrastructure.

IBM Tivoli Endpoint Manager for Core Protection V10.5 provides comprehensive endpoint protection with integrated anti-malware, personal firewall, and web reputation capabilities    Click here for more

Tivoli Identity Manager V5.1 Platform Updates
As part of IBM's ongoing commitment to support new versions of Tivoli's strategic software platforms, IBM Tivoli Identity Manager V5.1 testing/certification has been completed for the following platform updates:

• Firefox 3.6
• Windows USGCB (this is the U.S. Federal secure desktop requirement)
• AIX 7.1( including LPAR & WPAR partitions)
• VMWare ESX 4.1
• Oracle11gR2
• Microsoft SQL Server 2008
• IBM Tivoli Directory Integrator v 7.1
• z196 Hardware (zGryphon) - for zLinux

Save 50% on TAM E-SSO User Licenses through December 31, 2011!
IBM Tivoli Access Manager for Enterprise Single Sign-On (TAM E-SSO) is a proven access management solution that provides single sign-on for Windows, Web, Java, mainframe and teletype applications. TAM E-SSO eliminates the need for multiple log-ons and complex password management policies, improving user productivity and reducing help desk costs associated with password resets. Part of the Identity and Access (IAM) focus area of the IBM Security Solutions portfolio, TAM E-SSO works with other IAM products such as Tivoli Identity Manager to automate user provisioning and enhance security for sensitive data and applications.

Now this industry leading solution is available at dramatic savings! On July 12, 2011, IBM announced a worldwide (except for Japan) limited time price promotion that reduces the price of TAM E-SSO by 50%. The promotion is in effect through December 31, 2011, and standard Passport Advantage discounts apply. Don't miss this opportunity to save big on IBM's single sign on solution. For more information on the promotion, visit http://www-304.ibm.com/shop/americas/content/home/store_IBMPublicUSA/en_US/tam.html.