KRMC On-Premise is the self-hosted edition of the Kanguru Remote Management Console for Kanguru Defender® hardware encrypted USB drives. Deployed as a virtual appliance on your organization’s servers, it gives IT administrators and Data Security Officers a central console for managing devices and enforcing security policies.

Administrators can manage passwords and device permissions, remotely disable or delete lost or stolen drives, provision new devices, and audit activity. Sensitive documents and files stored on Defender drives remain on those encrypted devices.  The KRMC platform does not have access to them.

Choose from ADVANCED and PREMIUM pricing tiers to match your organization’s feature requirements and budget. For deployment guidance or an online demonstration, contact us or call 1-888-KANGURU.

 

See Details on KRMC On-Premise Price Tiered Structure

 

See the KRMC Remote Management Suite

 

Manage Defender Encrypted USB Drives On Your Own Servers

KRMC offers two convenient ways to manage Defender hardware encrypted drives:

• KRMC-Hosted which is hosted on Kanguru's own secure servers 
• KRMC On-Premise which can be hosted directly on the clients' own server

 

Features at a Glance:

• Fully Functional, Ready to Deploy Virtual Appliance
• 2-Factor Authentication
• License Calculator
• Device License Parking Tokens
• Flexible 1, 2, or 3 Year Subscriptions
• Enhanced UI for Easy Navigation
• AV Update Even for Offline Servers
• Set Master Password
• Simple and Easy to Use
• Limit Invalid Login Attempts
• Self-Service Password Management
• Locate Devices via IP Addresses and Hosts
• Automatic Global Provisioning, License Assignment and Management
• Streamlined License Management
• Automated Server Backups
• Track And Manage Secure USB Drives Worldwide
• Remotely Disable / Delete Lost Or Stolen Devices
• Remote Enable
• Remotely Update Assigned Secure USB Drives
• Generate Graphical Reports
• Set Up Online & Offline Permissions
• Notify Users And Roll Out Policy Updates
• Schedule Password Changes and Manage Password Strength and Length
  
• SAML Integration for Federated Logins with Microsoft^® ADFS, PingFederate, and Okta
• Easily Export Device Audit Info To CSV or XLSX
• and More...

Download the KRMC On-Premise Overview Information Sheet

Download the Overview Information Sheet for KRMC On-Premise

KRMC On-Premise includes Self Service Password Management (SSPM) for convenient, secure password reset.

 

 

Technical Specifications:

Host system Requirements: These requirements are for systems that will be used to host KRMC. 

PART NUMBER	KRMC-ONPREM Series
HOST SYSTEM REQUIREMENTS	•   Single-core processor or better •   250GB Storage •  4GB RAM or higher  •  Virtual Machine application (e.g. VirtualBox, VMWare Workstation Player)

 

 

How KRMC On-Premise Works:

When a supported Kanguru Defender® encrypted USB drive connects to a computer with a network or internet connection, administrators can view device information and activity reports, including the computer’s hostname and the device’s network location. If an administrator requests remote data deletion, the audit function records when that deletion occurs. User and administrator activity logs can be exported for analysis in applications such as Excel or databases, and logged for various regulatory compliance.

 

Self-Service Password Management

IT Administrators have their hands full already with the regular duties of IT management. The last thing they need is to be regularly interrupted by staff members who can't remember their password to their secure USB devices. Self-Service Password Management (SSPM) provides a secure means for staff to reset their own password through a secure service of KRMC On-Premise, letting administrators concentrate on the things they do best. Self-Service Password Management comes standard with the new KRMC On-Premise.

Learn More

Automatic Global Provisioning

It's now easier than ever for IT Administrators to create a global, consistent policy for provisioning secure USB drives. With Global Provisioning, administrators can:

• Define Security Password Policies and Parameters Up Front
• Ensure Consistent Deployment of Drives Company-Wide
• Ensure All New Drives Provision Automatically with the Parameters Set by the Administrator

Streamlined License Management

With new, enhanced license management features, KRMC On-Premise is making the Admins life easier than ever, with the ability to:

• Automatic License Assignment from license pool so your managed drives always stay protected
• Parking Token options for maintaining unused devices
• New License Calculator to stay on top of license renewals well ahead of time, ensuring that your account always has sufficient licenses and your drives never lose management capabilities

KRMC On-Premise Requirements:

• Minimum 100 KRMC On-Premise Device Licenses†
  
• Kanguru Local Administrator Configuration Tool
• One-Time Installation Service with Kanguru Engineering Support for Setup

† This allows for additional drives to be added to your KRMC On-Premise as needed. If you require under 100 licenses, KRMC-Hosted is a better option. Unused licenses will roll over into the next year, up to 3 years.

If your requirements are for less than 100 licenses, KRMC-Hosted may be the best option for you.

 

 

What KRMC On-Premise Offers

Remote Disable/Delete – KRMC allows administrators to remotely disable or delete lost, stolen or compromised devices to protect sensitive information and prevent data breaches.

Remote Enable – Gives security officers the ability to remotely enable a disabled device.

Password Management – KRMC allows administrators to manage a variety of password functions including: password length, strength, expiration, invalid login attempts, and master password. Passwords can also be changed or updated remotely to help users recover forgotten passwords and also meet new security policies.

Remote Provisioning – Remotely manage security policy changes from a single location. Control password complexity, password expiration, online and offline access, and more.

Offline Restrictions – Control whether devices can be used offline. Prevent unauthorized use in external networks.

IP and Domain Control – Manage which IP and/or domains are allowable for devices to access via whitelist and blacklist methodology.

Auditing and Reporting – KRMC enforces a full audit trail with detailed graphical reporting and the ability to export both customizable audit logs and graphs for external analysis to ensure proper compliance.

Groups – Manage and control groups of devices.

Administration – Granular level access to actions for individual administrators.

App Launcher – Auto-launch applications on Defender devices upon successful login.

Messaging – Remotely send messages to end user devices in the field with informative messages or announcements. Receive information for when Kanguru devices are connected.

E-mail Alerts – Administrators can setup e-mail alerts to notify themselves when certain events take place. (i.e.- device deleted, password changed, etc.)

Secure Tunnel - All communication occurs over secure SSL or TLS channel.

Other Key Features of Kanguru Remote Management Console for On-Premise

• Remote Delete (Deletes all data on the target drive)
• Action Scheduling  (present or future times)
• Auditing at administrator and super administrator level
• Locate via IP address and Hostname (IP Address / network location)
• Remote policy modifications:
  • Password Strength and Length (i.e. 10 characters: 2 upper, 2 numbers, etc)
  • Limit Invalid Login Attempts (i.e. 3 retries before drive is wiped)
    Rate at which password should be changed (i.e. every 30, 60, or 90 days)
  • Change user password
  • Change master password
    
    
• User groups (Admin & Super Admin)
• Device & License Import 
• Advanced Users & Groups Management
• IP & Domain Control
• Support for TLS & SSL communication
• Export Device Audit Data to .CSV or .XLSX
• Advanced filtering 
• Device Groups
• Real Time Graphical Reports
• Uses ANSI X9.31 Random Number Generator