Keycyte PAM 3.2 · Administrator Guide
Using Account Reports
The account report shows the health of the passwords stored in the password vault and the history of password changes and verifications. Use it to find accounts that need attention, for example accounts whose password is older than their password policy allows, or accounts whose last verification failed.
To open the report, select Reports > Account.
What the Report Includes
The report covers only accounts whose password Keycyte PAM can change and verify. Store-only secrets, such as certificates, API keys, secure notes and TOTP seeds, are left out. An ADMIN sees only the accounts that the ADMIN administers.
A password is considered expired when it is older than the maximum age set in the account’s password policy. An account without a password policy, or with a policy that has no maximum age, never expires.
Selecting the Period
The date selector in the toolbar sets the period for the time-based parts of the report (trends, activity, change history). Select Last 1 Day, Last 1 Week, Last 1 Month (default), Last 3 Months, Last 6 Months, Last 1 Year or Custom Range. For Custom Range, select the start and end dates.
The summary cards, health figures and the Expired Accounts and Failed Verify Accounts tabs always show the current state, regardless of the period.
Summary Cards and Alerts
| Card | Description |
|---|---|
| Total Accounts | Number of accounts in the report. |
| Healthy | Accounts whose last operation did not fail, whose password has been changed at least once, and which are neither expired nor expiring soon. |
| Expired | Accounts whose password is older than the policy allows. The card also shows how many accounts are expiring soon (within 7 days). |
| Failed Verify | Accounts whose last password change or verification failed. |
| Never Changed | Accounts whose password Keycyte PAM has never changed. |
| Never Verified | Accounts whose password has never been verified. |
An account that both failed and expired is counted in both cards. Below the cards, alerts summarize the conditions that need action.
Report Tabs
| Tab | Content |
|---|---|
| Overview | Charts: Health Distribution, Type Distribution, Password Change Trend, Policy Compliance, Operation Distribution, Password Age, and the Top Active Accounts table. |
| Expired Accounts | Accounts with an expired password: account name, server, last change, days expired and policy. |
| Failed Verify Accounts | Accounts whose last operation failed: account name, server, last verification date and error message. |
| Activity Log | Password operations in the period: time, user, account, destination, operation type, trigger, severity and message. |
| Change History | Password changes in the period, with the change date and the version number of each change. |
You can sort the Expired Accounts and Failed Verify Accounts tables by clicking the column headers.
Exporting the Report
To download the report as an Excel workbook, click Export Excel.
To send a similar summary by e-mail on a schedule, see Scheduling Reports.