When a security provider is configured, sensitive data contained in a data source is encrypted. Then, the default template can be selected in Administration - System Settings - Password Templatesīy default, passwords are not protected at rest.

In File - Templates, select Password Templates to create a template. Password templates set requirements for passwords generated with the password generators. Improvement Actions Items A default password template should be configured Achieving 100% is surely not an end goal in itself, we simply aim to raise awareness and provide ideas for your own security hardening. The scores are admittedly open to question and we do not pretend each topic has the same relative value for all of our community members. Some tips are common infosec best practices, others are a consensus between our owns teams. The Security dashboard is a tool to offer guidance on how to improve the security of the Remote Desktop Manager platform and also tips on reducing the workload for administrators. Warnings for untrusted rdp connections should be enabled.Vaults should be created with restricted permissions by default.Transparent data encryption (tde) should be used with sql server.Tls certificate validation should be enabled.The password strength analyzer should use zxcvbn.The data source password variable should be disabled.SMS should not be used for multi-factor authentication.Risky events should be disabled or generate a warning.Password expiration should be enabled for custom users.Multi-factor authentication (mfa) should be enforced.HTTPS should be used to connect to the data source.Configuration files should be encrypted using an application password.A minimal client version should be configured.A master key should be used with the data source.A default password template should be configured.

Devolutions remote desktop manager