Educause Security Discussion mailing list archives
Re: Physical Key Management
From: "Gallese, Brady T." <gallese () SUSQU EDU>
Date: Mon, 19 Aug 2019 14:06:25 +0000
Hi all, At Susquehanna, we use Morse keyboxes for our facilities, public safety, and IT staff to access physical keys. They are pricey, but reasonable when considering potential rekeying costs. We have them configured to use employees’ ID cards to swipe. You can set key restrictions, overdue alarms, etc. As an extra precaution in IT, we’ve put tiles on the keyrings too. https://www.morsewatchmans.com/products Thanks, Brady [cid:image002.png@01D4E3BE.AED3BB30] From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Frank Barton <bartonf () HUSSON EDU> Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> Date: Monday, August 19, 2019 at 9:31 AM To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU> Subject: Re: [SECURITY] Physical Key Management I wish that these manufacturers had list prices posted... On Mon, Aug 19, 2019 at 9:29 AM Rachel Weaver <rweaver () macalester edu<mailto:rweaver () macalester edu>> wrote: Jonathan, for a little more info, we got our keyboxes from Key Systems (www.keystorage.com<https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.keystorage.com&data=02%7C01%7Cgallese%40SUSQU.EDU%7Cf2a7ddf4dc3742d6068c08d724a978f8%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637018182608392990&sdata=MUTSuCcsUNtcWT4D0RtMfxbYBlDs%2FOLoCojryL6JB0w%3D&reserved=0>). It looks like they have several other secure key management options in addition to the one our campus uses (Security Asset Manager). Rachel RACHEL WEAVER '06 (she/hers) Associate Director, Support Services Information Technology Services (651) 696-6507 | rweaver () macalester edu<mailto:rweaver () macalester edu> 1600 Grand Avenue Saint Paul, MN 55105 USA [https://docs.google.com/uc?export=download&id=0B-1YKkN61Ct6eHFXc2NHbW9LZHc&revid=0B-1YKkN61Ct6RkMxaWhGckVIM1FIaVMzUzJyNDB0NGlmbndnPQ] On Fri, Aug 16, 2019 at 12:47 PM Kimmitt, Jonathan <jonathan-kimmitt () utulsa edu<mailto:jonathan-kimmitt () utulsa edu>> wrote: Hi all, Thank you for the replies! I’m going to look into the Morse (I’ve not seen those before) and the Keys Systems (I’ve quoted these recently). I like the Key Trap idea for a cheaper alternative…. -Jonathan From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>> On Behalf Of Kimmitt, Jonathan Sent: Friday, August 16, 2019 9:20 AM To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU> Subject: [SECURITY] Physical Key Management Hi all, I’m curious on what people have had success with for physical key management? Specifically the master & grandmaster keys that the IT department uses to get into buildings, offices, and residential areas, so they may work on the network, computers, etc.? We have tried a few things in the past, and are looking for something new: - Check out system at your Campus Security/Facilities department? (Staff are extremely resistant to this) - Physical key management lock box (that only allows each person only their assigned key) (This can be very expensive) - Regular lockbox (the hanging tag type, that anybody could take anything from the box)? (Our current setup) Specifically, we have concerns on a couple of issues…. 1. Technicians/engineers taking keys home 2. Technicians taking keys that are not assigned to them 3. Technicians taking keys that have greater access than they are approved for Is this an issue at other institutions? Has anybody found a good balance between security and convenience? -Jonathan ~ Jonathan Kimmitt CISSP, PCIP, CEH, CIPM, GPEN, CIPT, CIPP/E Chief Information Security Officer Information Technology The University of Tulsa 918.631.2743 jonathan-kimmitt () utulsa edu<mailto:jonathan-kimmitt () utulsa edu> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cgallese%40SUSQU.EDU%7Cf2a7ddf4dc3742d6068c08d724a978f8%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637018182608392990&sdata=amEet6cAIvqbAyWpRAzJJ6trl7QD58ZVH2WWVOAuecU%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cgallese%40SUSQU.EDU%7Cf2a7ddf4dc3742d6068c08d724a978f8%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637018182608402985&sdata=vvDuKaUFS69Sd3vc5RVS%2BK4XN3q0O47iEEKYdvII6Tg%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cgallese%40SUSQU.EDU%7Cf2a7ddf4dc3742d6068c08d724a978f8%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637018182608402985&sdata=vvDuKaUFS69Sd3vc5RVS%2BK4XN3q0O47iEEKYdvII6Tg%3D&reserved=0> -- Frank Barton, MBA Security+, ACMT, MCP IT Systems Administrator Husson University ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cgallese%40SUSQU.EDU%7Cf2a7ddf4dc3742d6068c08d724a978f8%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637018182608412981&sdata=IlRrZ3wW7BxnfAE3X4S3EX1u6fU4AR%2Bcc2mG0nsrIDI%3D&reserved=0> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Physical Key Management Kimmitt, Jonathan (Aug 16)
- Re: Physical Key Management Jacobs, Mike (Aug 16)
- Re: Physical Key Management Dan Wasson (Aug 16)
- Re: Physical Key Management Rachel Weaver (Aug 16)
- Re: Physical Key Management Kurtz, Eric (Aug 16)
- Re: Physical Key Management Kimmitt, Jonathan (Aug 16)
- Re: Physical Key Management Rachel Weaver (Aug 19)
- Re: Physical Key Management Frank Barton (Aug 19)
- Re: Physical Key Management Gallese, Brady T. (Aug 19)
- Re: Physical Key Management Rachel Weaver (Aug 19)
- Re: Physical Key Management Jacobs, Mike (Aug 16)
- Re: Physical Key Management Kevin Schmidt (Aug 19)
- <Possible follow-ups>
- Re: Physical Key Management John Kristoff (Aug 16)
- Re: Physical Key Management Alex Keller (Aug 16)
- Re: Physical Key Management Zeray Assefa (Aug 17)