Securing the last mile with local account password rotation

IBM Vault Enterprise 2.0 introduces a dedicated plugin for password rotation of local operating system accounts, addressing security risks of unmanaged local accounts that often share static passwords across multiple servers.

• •Plugin uses SSH protocol to establish secure connections and automate password rotations directly on target hosts
• •Assigns unique, distinct passwords to each system, eliminating risk of single credential compromise affecting multiple servers
• •Passwords rotate periodically or on demand via Vault API, CLI, or Terraform provider
• •Supports multiple account types including unmanaged accounts, emergency accounts, and privileged repair accounts
• •Provides password version history and comprehensive rotation audit trails for compliance reporting