Keycyte PAM 3.2 · Administrator Guide

Managing Services, Storage, Tags and the Recycle Bin

This topic covers four maintenance pages of the Settings menu: Services, Storage, Tags and Recycle Bin.

Services

The Services page shows the containers that make up Keycyte PAM and lets you control them. It also manages the access keys that Keycyte PAM services use to authenticate to the PAM server.

To open the page, select Settings > Services.

Keycyte Services

The Keycyte Services card lists the service containers:

To refresh the list, click Refresh.

• To view the recent log output of a container (the last 500 lines), click Logs. In the log panel, click Refresh to reload it.
• To control a container, click Start, Stop or Restart and confirm the operation.

If the page shows Docker socket not available, the Docker socket (/var/run/docker.sock) is not mounted into the PAM container, and the service list and logs cannot be shown. For details, see the Deployment Guide.

Service AccessKeys

Keycyte PAM services such as keycyte-ssh-proxy and keycyte-radius-server authenticate to the PAM server with an HMAC-SHA256 HTTP signature and a per-service access key. The Service AccessKeys card lists the services, their Access Key ID, and when the key was Last Used.

To generate or rotate a key:

1. In the row of the service, click Generate (no key yet) or Rotate (replace the existing key). Rotating asks for confirmation.
2. In the dialog that opens, copy KEYCYTE_ACCESS_KEY_ID and KEYCYTE_ACCESS_KEY_SECRET, or click Copy as .env.
3. Set the two values as environment variables of the service container.
4. Restart the service container.

These keys are for Keycyte’s own services. Keys for customer applications that read secrets are issued to service identities; for details, see Service Identities.

Storage

The Storage page shows the per-user virtual drive directories on the Keycyte PAM server (/drive). These directories hold the files that users transfer through the virtual drive of their sessions.

To open the page, select Settings > Storage.

The list shows each Directory Name and Directory Size. Expand a directory to see its files, with File Name and File Size. To find a directory, type in Search Keyword.

• To delete a single file, click the delete button in the file row and confirm.
• To delete all files in a directory, click the delete button in the directory row and confirm.

Tags

Tags are labels for grouping and filtering servers, password vault accounts, users and roles. Tags do not grant access to anything; access is governed by roles. The Tags page manages the tag vocabulary that is offered everywhere tags are used.

To open the page, select Settings > Tags.

The list shows each tag with its Name, Description and In use count (the number of items that carry the tag, or unused).

To add a tag:

1. Click Add.
2. Enter a Name, and optionally select a Color and enter a Description.
3. Click Save.

To change a tag, click Edit in its row.

To merge two tags:

1. In the row of the tag to remove, click Merge.
2. Select the tag to merge into.
3. Click Merge.

Every item that carried the first tag now carries the selected tag, and the first tag is deleted.

To delete a tag, click Delete in its row and confirm. If the tag is in use, the confirmation says on how many items; deleting the tag removes it from all of them.

Recycle Bin

When you delete a password vault account, Keycyte PAM keeps it in the recycle bin for a retention period, so that you can restore it. After the period ends, the account is purged automatically. The retention period is set in Settings > General (Recycle Bin Retention, default 30 days).

To open the page, select Settings > Recycle Bin.

The list shows each deleted account with its Name, Username, Type, Deleted By, Deleted At and Expires In (days left, or Expired). No password is shown on this page.

• To restore an account, click Restore and confirm. The account returns to the password vault with its owners, servers, roles and history.
• To delete an account permanently, click Delete Permanently and confirm. This cannot be undone.