Keycyte PAM 3.2 · Administrator Guide
About This Guide
This guide describes how to configure and operate Keycyte PAM from the Admin Panel: how to add the systems that users connect to, store and rotate privileged credentials, define who may reach what, and monitor and audit privileged sessions.
The guide applies to Keycyte PAM 3.2.
Intended Audience
This document is intended for system administrators and security officers who configure and operate Keycyte PAM. You should be familiar with the systems that Keycyte PAM protects (Windows, Linux, network devices and databases) and with your directory services.
How This Guide Is Organized
| Section | Description |
|---|---|
| Getting Started | Signing in to the Admin Panel, the panel layout, administrator types and permission profiles, and the dashboard. |
| Servers | Adding servers, the supported connection protocols, protocol-specific connection settings and bulk operations. |
| Password Vault | Account types, adding accounts, changing and verifying passwords, password history and the recycle bin. |
| Password Policies | Password complexity, automatic password change and the operations that run before and after a connection. |
| Users | User types and roles, adding users, multi-factor authentication, domain user synchronization and service identities. |
| Roles | Server roles, password roles and user roles: who may connect to which server with which account, and when. |
| Access Control | Access requests and approvals, resource rules and command filters. |
| Sessions | Watching and terminating active sessions, session recordings, command history and file history. |
| Discovery | Finding servers and accounts in Active Directory/LDAP, VMware and Proxmox with discovery templates. |
| Reports | Account and session reports and scheduled e-mail reports. |
| Logs | Log types and forwarding logs to a SIEM over syslog. |
| Settings | General, connection, authentication, notification, RADIUS and TACACS+ server, services, storage and tag settings. |
| Secrets API | Retrieving passwords from applications with a service identity. |
Document Conventions
User interface elements are shown in bold, exactly as they appear in the Admin Panel. A menu path is written as Roles > Server Roles. Field values, commands and file names are shown in code.
Note
Notes give additional information about the topic.
Important
Important notes describe conditions that must be met before you continue.
Tip
Tips describe an easier or better way of doing something.
Warning
Warnings describe actions that can cause data loss or a security risk.