CMU lets system administrators automate the common credential management tasks that most users find extremely daunting. Custom CMU scripts can be used to:
- facilitate PKI enrollment
- reconfigure critical applications after key rollover
- synchronize user credentials between web browsers
- create secure backups of user credentials
- transparently configure user CAPI, MAPI, Outlook S/MIME, and GAL profiles
Imagine what you'll save in help desk calls alone!
CMU scripts can be easily distributed as self-extracting/self-executing packages that users can run from your corporate web server by simply clicking on a link.
New! CMU 2.7.1 supports the substitution of references to CSPid-compatible, DPAPI-encrypted password files in place of explicit passwords in all appropriate command line arguments. This allows users to hide their passwords from any administrator/system process that can monitor/log their command line invocations. (Similar enhanced functionality is provided for authenticated HTTPS downloads using the 'cmu d' operation via the support of up to nine independent POST/GET parameters that are replaced at runtime by the contents of Windows DPAPI-protected files.)
Included in the latest release is a stand-alone customizable GUI application (cpf4cmu) that may be distributed to end-users for the purpose of creating suitable DPAPI-protected ciphertext files; no CSPid license is required.