Radmin Security Update

Article describes changes to Password Manager

This article was last reviewed on 03/21/06 and refers to TSWand version 7.4.0005.

Description

The Password Manager is a utility program that is designed to randonly genenerate passwords for both the FTP server and Radmin Viewer programs running on the Wand Restaruant Management Systems. 

The Wand system used both FTP and Radmin viewer for polling and support purposes.  These applications allow not only Wand personnel and people from within your organization access to the computers, but persons outside of our organizations if the naming and password conventions are known.

This enhanced security system includes a mechanism which randomly changes the password for each site at regular intervals, then updates a central database with the new password. This approach greatly reduces the possibility of intrusions from persons on the Internet

Password Manager

Once a franchise has been added to the Password Management solution, all franchise privileges may be managed through the Wand Password Management Website.  The site is located at http://password.wandcorp.com.   These privileges are divided into three administrative levels, as described below:

Franchise level (Super User)

A user at this level has control over the entire organization.

Permissions: 

• Able to create groups
• Able to add and delete users
• Able to manage user permissions.
• Able to assign sites to groups.
• Able to view or change all passwords associated with franchise. 

Group level

A user at this level has control over groups.  This level is appropriate for organizing by state, district, region, etc. Group level users are able to configure site level users so that they may control sites other than their own within the same group.

Permissions:

• Able to create groups
• Able to add and delete users
• Able to manage user permissions
• Able to view and change passwords at the site level 

Site level

This level is appropriate for organizing by site.

Permissions:

• Able to view site data

Logging Into The Password Manager Website

 The Wand Password Management website is located at:    http://password.wandcorp.com

	Enter your assigned username and password at the prompt. Click on the submit button.       Once successfully logged into the Password manager Website, the following menu will appear at the top of the screen:

Navigating The Site

As the Main Menu illustrates, there are five operational modes to the Password Manager.  This menu will remain available at the top of the screen regardless of the mode selected. Operational modes which are not available to the current user will still appear, but will not be accessible.  These modes and the operations available in each are detailed in the following sections.

Settings

This section provides for the changing of user settings.  Initially the only setting which can be changed is the password for accessing the Password Manager Website.

Change Password For Current User:

Click on the Settings button from the Main Menu. Type the new password into both boxes. Click on the Submit button. This will only change the password for the current user that is logged into the Web site.

Users:

The Users section allows for the management of users and the permissions given to those users.  The available functions are:

 Adding A User:

Select the Users section from the Main menu. Click on the Add User button. Fill out the user information. When finished with step 3, click the Save User button. Once a user has been added, permissions can be assigned to that user.  To add or remove permissions, see the section titled Add/Remove User Privileges.

Deleting A User:

Select the Users section from the Main menu. Locate the user’s name in the list which appears. Click on the Edit Permissions link for that user. To remove the user currently being edited, click on the Delete User button at the bottom of the screen.

Modifying Privelages:

Select the Users section from the Main menu. Locate the user’s name in the list which appears. Notice that the current permissions for each user listed are displayed to the right of each name. Click on the Edit Permissions link for that user. Check or uncheck the Manage Groups Access and Manage Users Access boxes as desired to adjust the group and user permissions for that user. When step 4 is complete, click on the Save button nearest the Manage Access buttons. To assign sites to a manager, see the section titled:  Assigning Sites and Groups to a Manager.

Assigning Sites And Groups To Managers

Select the Users section from the Main menu. Locate the user’s name in the list which appears. Notice that the current permissions for each user listed are displayed to the right of each name. Click on the Edit Permissions link for that user. An Edit Permissions section will appear for the selected user. Check the boxes for the site or sites which the selected user should be able to manage.  Uncheck the box to deny management privileges to the selected user.  In order to be assigned to manage a site or group, the user must first be assigned group management access.  To do this, see the section titled: Adding or Removing User Privileges.  Checking the box for a group is the same as checking all the boxes within the group.  Once step 5 is complete, click on the Save button at the bottom of the screen. Notice that users can be assigned permissions for sites in more than just one group.

Site Passwords:

The passwords section allows for the viewing and changing of site passwords within the database.  Only those passwords to which the current user has access can be viewed or changed.  The available functions are:

Viewing Site Passwords:

Select the Passwords section from the Main menu. A list of sites will appear arranged by group. To the right of each site will appear the current password. If the site listed has updated, a green O will appear on the line for the site If the site listed has not updated, a red X will appear on the line for the site.  Only those passwords for sites which the user manages will be displayed.

Changing Site Passwords:

Select the Passwords section from the Main menu. A list of sites will appear. Only those passwords for which the user has viewing privileges will be displayed. Click on the Change Password link for the chosen site. A message will appear requesting confirmation of the password change for the selected site. To continue with the password change, click on the Change Password button. The password will be changed to a new random value as determined by the site’s local and global salt values and the current date and time.  If a password is changed through the Password Management website, this password will be effective until the site newdays.

Groups

The password Management Website organizes sites by grouping them.  This makes administration easier as you can apply users such as District MAnager to groups rathar than sites.  The available functions are:

Changing A Group

Select the Groups section from the Main menu at the top of the screen. In the Add A Group field, enter the name of the group to be created. When step 2 is complete, click on the Add button. A group with the supplied name will be created. Once this group is created, sites can be assigned to it.  See the section titled Assigning Sites to a Group.

Assigning A Group:

Select the Groups section from the Main menu at the top of the screen. A list of unassigned sites will appear (if any exist) followed by the listing of sites which have already been assigned to a group. To assign a site to a group or to change a group assignment, choose the preferred group from the menu to the right of the site’s name and address. When finished with step 3, click on the Save button.

Deleting A Group:

This functionality is not currently available, but will be added soon.

Adding A Site:

Sites are added to the Password Manager Website automatically once they are created in the Wand database.  The Franchise level manager (Super User) need only create groups, assign the sites to those groups, then assign permissions to users as desired

 Logout:

This is not a separate section.  Clicking on this button will terminate the current session on the Password Manager Website.

 As mentioned in the overview, before the franchise can be managed through the Password Management Website, the software at the site and at the Central Office must satisfy a minimum requirement.  The following section describes this requirement in detail.  If an update is necessary, the process will be performed entirely by the Wand Support Staff.

Installing and Configuring the Update

The Radmin Security Update requires a minimum TSWand software requirement of 7.4.5 or greater at both the site and Office level. 

Installing and Configuring the IPUpdater:

Each site within a participating franchise must have IPUpdater version 3.0.0.1 or later installed.  Once installed, IPUpdate must be configured with the correct information for the site.  The details of this process follow: 

Updating the Central Office:

The Central Office for the franchise must have TSCO version 7.4.5 or later installed.  The details of this process follow:

1. Run the version 7.4.5 Wand Central Office installer.
2. After updating the Central Office software, run the NFOTCO process to add existing files and tables to the new Central Office installation.  To do this, perform the following steps:
   1. Open a Windows Command Prompt.
   2. Change to the CO directory at the site: cd c:\co
   3.  Execute the following command: 

for /d %1 in (????) do nfotco.cmd %1

This command will repeatedly prompt the user to “Press any key to continue….”  Do this until the command completes.

The portion of the TSCO installation which is significant to the Radmin Security Update is a utility called COPasswordUpdate which serves to update the passwords at the Central Office location from the Wand database.  This will allow site polling to continue.  COPasswordUpdate will run automatically, but may be run manually at any time to force an update of local passwords.  To run the utility manually, execute C:\Program Files\TSwand\COPasswordUpdate

If you encounter any problems with the Password Manager Website, please contact the Wand Help Desk at (952)361-6250.