Re: Physical Key Management

["Gallese, Brady T." <gallese () SUSQU EDU>]

Hi all,

At Susquehanna, we use Morse keyboxes for our facilities, public safety, and IT staff to access physical keys.  They 
are pricey, but reasonable when considering potential rekeying costs.  We have them configured to use employees’ ID 
cards to swipe.  You can set key restrictions, overdue alarms, etc.  As an extra precaution in IT, we’ve put tiles on 
the keyrings too.

https://www.morsewatchmans.com/products

Thanks,
Brady

[cid:image002.png@01D4E3BE.AED3BB30]

From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Frank Barton 
<bartonf () HUSSON EDU>
Reply-To: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Monday, August 19, 2019 at 9:31 AM
To: "SECURITY () LISTSERV EDUCAUSE EDU" <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: Re: [SECURITY] Physical Key Management

I wish that these manufacturers had list prices posted...

On Mon, Aug 19, 2019 at 9:29 AM Rachel Weaver <rweaver () macalester edu<mailto:rweaver () macalester edu>> wrote:
Jonathan, for a little more info, we got our keyboxes from Key Systems 
(www.keystorage.com<https://nam02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.keystorage.com&data=02%7C01%7Cgallese%40SUSQU.EDU%7Cf2a7ddf4dc3742d6068c08d724a978f8%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637018182608392990&sdata=MUTSuCcsUNtcWT4D0RtMfxbYBlDs%2FOLoCojryL6JB0w%3D&reserved=0>).
 It looks like they have several other secure key management options in addition to the one our campus uses (Security 
Asset Manager).

Rachel


RACHEL WEAVER '06 (she/hers)

Associate Director, Support Services

Information Technology Services

(651) 696-6507 | rweaver () macalester edu<mailto:rweaver () macalester edu>



1600 Grand Avenue

Saint Paul, MN 55105 USA

[https://docs.google.com/uc?export=download&id=0B-1YKkN61Ct6eHFXc2NHbW9LZHc&revid=0B-1YKkN61Ct6RkMxaWhGckVIM1FIaVMzUzJyNDB0NGlmbndnPQ]


On Fri, Aug 16, 2019 at 12:47 PM Kimmitt, Jonathan <jonathan-kimmitt () utulsa edu<mailto:jonathan-kimmitt () utulsa 
edu>> wrote:
Hi all,

  Thank you for the replies!

I’m going to look into the Morse (I’ve not seen those before) and the Keys Systems (I’ve quoted these recently).

I like the Key Trap idea for a cheaper alternative….

-Jonathan



From: The EDUCAUSE Security Community Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV 
EDUCAUSE EDU>> On Behalf Of Kimmitt, Jonathan
Sent: Friday, August 16, 2019 9:20 AM
To: SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Physical Key Management

Hi all,

  I’m curious on what people have had success with for physical key management?

Specifically the master & grandmaster keys that the IT department uses to get into buildings, offices,  and residential 
areas, so they may work on the network, computers, etc.?

We have tried a few things in the past, and are looking for something new:


-          Check out system at your Campus Security/Facilities department?  (Staff are extremely resistant to this)

-          Physical key management lock box (that only allows each person only their assigned key)  (This can be very 
expensive)

-          Regular lockbox (the hanging tag type, that anybody could take anything from the box)?   (Our current setup)

Specifically, we have concerns on a couple of issues….


1.       Technicians/engineers taking keys home

2.       Technicians taking keys that are not assigned to them

3.       Technicians taking keys that have greater access than they are approved for

Is this an issue at other institutions?  Has anybody found a good balance between security and convenience?

-Jonathan


~
Jonathan Kimmitt
CISSP, PCIP, CEH, CIPM, GPEN, CIPT, CIPP/E
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743
jonathan-kimmitt () utulsa edu<mailto:jonathan-kimmitt () utulsa edu>



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cgallese%40SUSQU.EDU%7Cf2a7ddf4dc3742d6068c08d724a978f8%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637018182608392990&sdata=amEet6cAIvqbAyWpRAzJJ6trl7QD58ZVH2WWVOAuecU%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cgallese%40SUSQU.EDU%7Cf2a7ddf4dc3742d6068c08d724a978f8%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637018182608402985&sdata=vvDuKaUFS69Sd3vc5RVS%2BK4XN3q0O47iEEKYdvII6Tg%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cgallese%40SUSQU.EDU%7Cf2a7ddf4dc3742d6068c08d724a978f8%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637018182608402985&sdata=vvDuKaUFS69Sd3vc5RVS%2BK4XN3q0O47iEEKYdvII6Tg%3D&reserved=0>


--
Frank Barton, MBA
Security+, ACMT, MCP
IT Systems Administrator
Husson University

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at 
https://www.educause.edu/community<https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.educause.edu%2Fcommunity&data=02%7C01%7Cgallese%40SUSQU.EDU%7Cf2a7ddf4dc3742d6068c08d724a978f8%7Cf78aa315d9b34b8c9d672e8fefdb2d07%7C1%7C0%7C637018182608412981&sdata=IlRrZ3wW7BxnfAE3X4S3EX1u6fU4AR%2Bcc2mG0nsrIDI%3D&reserved=0>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community