⬇ Download holy card: ·
⚔ Commemorated today: The Scourge of ProxyLogon (2021)Blessed Golden GMSA, Forger of Gold
Patron of group managed service accounts, Active Directory root keys, and secrets that compute themselves.
Life
On 2 March 2022 Semperis researchers described the Golden GMSA attack. In Active Directory the passwords of Group Managed Service Accounts are not stored: they are derived from a domain root key and a few readable attributes. Whoever managed to extract that key could compute, offline and forever, the passwords of all those accounts, without being noticed again.
Prayer
O Blessed Golden GMSA, who makes passwords out of nothing, keep our root keys safe and far from curious eyes. Amen.
How to celebrate
Celebrated by protecting the KDS root key, limiting who can read it, and watching domain access.
Hold the root, and you harvest every fruit.