This section explains how to access iManage Threat Manager and sign in, using either the Local Admin Account or an iManage Work user account.

From a browser, access the URL http://<TM_host>, where <TM_host> is the virtual machine name or IP address of the system that contains the iManage Threat Manager application. 

In this section:

(On-premises) Sign in with the Local Admin Account

If you’re signing in before the iManage Work Server is configured, you must sign in with the Local Admin Account. The Local Admin Account is created locally on the Threat Manager appliance during installation, separate from any iManage Work user account. For details on setting its initial password, refer to Step 6: Set the passwords for the OVA default account and the Local Admin Account of iManage Threat Manager Installation Guide.

(On-premises) Task: Sign in with the Local Admin Account for the first time

After the system has been set up in site loading mode, and you’re accessing the application for the first time, sign in with the out-of-the-box default Local Admin Account (admin), and set a password for this account. 

  1. Enter the password in the relevant field, and then enter it again to confirm it.

  2. Select Change Password. The password must meet the following requirements: 

    • At least 8 characters

    • At least 1 uppercase character

    • At least 1 lowercase character

    • At least 1 character that isn’t a letter (for example, a digit or symbol)

If you’ve already accessed this URL and set your password, sign in using your updated password instead.

Record this password in a secure location. To change this password, refer to Task: Change the Local Admin Account password.

(On-premises) Task: Sign in with the Local Admin Account

Use the Local Admin Account (admin) to sign in to Threat Manager at any time. This is useful if the Work Server is inaccessible and you need to access Threat Manager.

IMPORTANT: The Local Admin Account is restricted to a partial Configuration Manager Role after the iManage Work Server is configured. Unlike a normal user with the Configuration Manager Role, the Local Admin Account doesn’t have access to User Alert Rules, Matter Activity Reports, Default Date settings, Risk Score settings, or the import/export of Global Exclusion Lists. This is a security control that ensures alerts, monitoring rules, or analysis can’t be performed by the Local Admin Account. For more information, refer to Configuration > Roles.

You need the password that was initially set for the Local Admin Account to complete this task.

  1. Browse to iManage Threat Manager with the Local Admin Account using http://<TM_host>/login/local
    or https://<TM_host>/login/local (if SSL access was enabled during the initial provisioning sequence).

  2. Enter the Local Admin Account credentials: admin and the password you set initially for the account.

  3. Set the default time zone for iManage Threat Manager: select a time zone from the dropdown list, then select Save.

Time zone can also be adjusted later in Settings. For more information about this, and about how time zones are applied, refer to Settings: General.

(On-premises) Task: Change the Local Admin Account password

Use this procedure to change the Local Admin Account password.

  1. Sign in using the Local Admin Account credentials: admin and the password you set initially for the account. The Threat Manager application opens.

  1. Select admin as displayed in the upper right corner of the application.

  2. From the drop-down menu, select Reset Password.

  3. Enter the password in the relevant field, and then again to confirm it. The password must meet the following requirements: 

    • At least 8 characters

    • At least 1 uppercase character

    • At least 1 lowercase character

    • At least 1 character that isn’t a letter (for example, a digit or symbol)

  4. Select Submit. A success message is displayed; use the new password at your next sign-in.

You can also adjust the default time zone for iManage Threat Manager at this point if required: select a time zone from the dropdown list, then select Save. Time zone can also be adjusted later in Settings. For more information about this, and about how time zones are applied, refer to Settings > General.

Sign in with an iManage Work user account

After the iManage Work Server is configured, you can sign in using your iManage Work credentials. For more information, refer to System > iManage Work Server configuration.

User feedback panel

After signing in, some users may see a feedback panel inviting them to share their experience with iManage Threat Manager. This panel is shown based on system-wide settings and may not appear for every user; there are no configuration options within Threat Manager to control its visibility or frequency. Feedback submitted through this panel helps improve the product experience.

iManage Threat Manager home page

The system navigates you to the Home page of iManage Threat Manager.

(On-premises) When the iManage Work Server isn't yet configured, the Local Admin Account is automatically granted all role privileges. In this state (site loading mode), you can load the application, configure it, and perform testing without setting up a dedicated iManage Work Server.

NOTE: For information on configuration settings, including setting up the iManage Work Server, refer to Configuration > Settings.

After the iManage Work Server is configured, users assigned to iManage Threat Manager roles can access the application using the credentials they use to access iManage Work.

(On-premises) For strict security controls, after the iManage Work Server connection has been configured, the Local Admin Account (that was initially used to set up iManage Threat Manager) can only be used to access the Configuration page. No data from alerts or monitoring rules, or analysis can be performed by the Local Admin Account.

Accessing the iManage Threat Manager application through iManage Control Center

After iManage Work Server is configured, and the optional iManage Control Center plug-in has been installed, you can access Threat Manager from iManage Control Center. For more information, refer to Installing the iManage Threat Manager plug-in for iManage Control Center in iManage Threat Manager Installation Guide.

Task: Access iManage Threat Manager through iManage Control Center

  1. Sign in to iManage Control Center.

  2. Select Threat Manager in the left panel.

  3. On the iManage Threat Manager link screen, select the link on the page.

  4. iManage Threat Manager opens.