Overview
The Segura platform supports credential management and secure delivery for legacy systems and protocols, including mainframe (TN3270/5250), Telnet, FTP, and other non-API-compatible applications. Using agentless methods, Segura can automate credential updates and inject secrets directly into scripts, batch jobs, and configuration files, ensuring compliance and operational continuity for critical legacy infrastructure.
Key Features
- Mainframe support: automate credential updates and password injection for TN3270/TN5250 mainframe sessions.
- Telnet/FTP integration: securely manage and rotate credentials for legacy devices and applications using Telnet, FTP, and custom CLI interfaces.
- Script and batch file integration: update and inject secrets directly into operational scripts, batch jobs, or configuration files.
- Agentless or agent-based delivery: choose between agentless execution (via secure session proxying) or deploy a local agent where remote updates are needed.
- Audit and compliance: all credential delivery and rotation events are logged for audit and compliance purposes.
Use Cases
- Manufacturing and industrial: maintain secure, automated credential management for industrial PLCs and SCADA devices accessed via Telnet.
- Mainframe environments: automate password changes and secret delivery for legacy mainframe applications using TN3270/5250.
- Legacy file transfers: inject and rotate FTP server credentials in legacy batch scripts or scheduled jobs.
- Banking and finance: securely update credentials for COBOL-based systems, ATMs, and core banking platforms.
Integration methods
- Execution templates: define how credentials are injected or rotated for legacy protocols using customizable templates.
- Scripted automation: trigger credential updates as part of scheduled jobs, maintenance windows, or upon password expiration.
- Agent-based delivery: where required, deploy the Segura Agent to manage credentials on endpoints that cannot be reached directly.
Example: Automated password rotation for FTP script
Suppose you have a legacy batch script that logs into an FTP server. Segura can update the credentials used in this script automatically upon each rotation.
Before rotation
ftp -n -s:login.txt
login.txt contains
user olduser
pass oldpassword
After Rotation
Segura updates login.txt with the new password, triggered by policy or schedule.
Example: Telnet password injection via execution template
- Configure an execution template to connect via Telnet and inject the new password into the device/application, followed by a verification command.