Email this page to friends
Identity & Access Management

Quest One Privileged Password Manager

Comprehensive Privilege Safe Functionality for Your Most Important Administrative Access Credentials

Quest One Privileged Password Manager automates, controls and secures the entire process of granting administrators the credentials necessary to perform their duties. Privileged Password Manager ensures that when administrators require elevated access, that access is granted according to established policy, with appropriate approvals, that all actions are fully audited and tracked and that the password is changed immediately upon its return.

It’s a secure, compliant and efficient solution to the age-old “keys to the kingdom” problem. Privileged Password Manager is deployed on a secure, hardened appliance.


  • Release Controls: Manages password requests from authorized users, programs and scripts — via a secure Web browser connection — for the accounts they are entitled to access. The request for one or more passwords can be automatically approved or require any level of manual approvals.
  • Change Control: Supports configurable, granular change control of shared credentials, including time-based, last-use-based and manual or forced change.
  • Enterprise-ready: Integrates with existing directories, ticketing systems and user authentication sources, including Active Directory, LDAP and fully supports two-factor authentication through Quest Defender or other third-party, two-factor authentication products. A robust CLI/API supports end-to-end integration with existing workflows and tools, including reviewer notification and escalation workflows.
  • Scalable Appliance: Provides secure, hardened, enterprise-ready access and management of shared credentials for more than 250,000 accounts at once.
  • Secure Password Storage: Encrypts all stored passwords stored using AES-256 encryption. In addition, the appliance also uses Guardian Edge AES-256 full-disk encryption.
  • Application Password Support: Includes the capability to replace hard-coded application and database passwords in scripts, procedures and other programs.
  • Robust Target Support: Manages shared credentials on the widest range of target servers, network devices and applications.
  • Handheld Device Support: Includes full support for password request, approval and retrieval via handheld devices, configurable on a per-user basis.
Download Document Link:

For more information about Quest Sofware,
please contact our Sales Representative at 2556 2162, or email at