Keycyte PAM 3.2 · User Guide

Password Vault and Private Vault

The Client Panel has two vaults:

Both vaults are opened from the static entries at the end of the server tree.

Password Vault

The Password Vault lists the accounts you can use. You can copy the user name of an account and, if your role allows it, the password.

To open the Password Vault:

1. In the server tree, click Password Vault.

The list shows the following columns:

To find an account, type part of its name, user name or domain in the Search Accounts field. To reload the list, click Refresh.

If the list is empty, no account is assigned to you. Ask your administrator.

Copying a Password

To copy a password:

1. In the row of the account, click the copy button in the Password column.

The password is copied to your clipboard. After 20 seconds, Keycyte PAM clears the clipboard if it still contains the password, and shows a message.

If copying is not allowed for you, the message Not authorized to copy this password is shown. You can still use the account to connect to servers, if it is assigned to them. See Opening a Browser Session.

Private Vault

In the Private Vault you keep your own credentials and secrets, encrypted on the Keycyte PAM server. You can link account entries to servers, so that you can connect with them, and share entries with other users.

To open the Private Vault:

1. In the server tree, click Private Vault.

The list has the same columns as the Password Vault, plus a share indicator and the Action column with Edit, Share and Delete buttons.

Entry Types

Secret types are stored only; they cannot be linked to servers and have no password policy.

Adding an Entry

To add an entry:

1. Click Add.

   The Account panel opens.

2. In Type, select the entry type.

3. Fill in the fields for the type. See Entry Types.

   For certificate and PFX files, click the select button and choose the file (up to 8 MB). Keycyte PAM reads the file and fills in the details automatically when it can. For a PFX file, enter the Passphrase to fill in the details.

4. For account types, optionally:

   • In Policy, select a password policy.
   • In Server, select the servers that this account is for. Use Select All and Clear in the list to select or clear all servers that match your search.

5. Optionally, enter a Description.

6. Click Save.

The entry appears in the list.

If a required value is missing, a message such as Secret value is required or Private key is required is shown.

Connecting with a Private Vault Entry

When you link an account entry to a server, the entry appears on the account selection card of that server, if your role allows Private Vault accounts for the server. See Opening a Browser Session.

Editing an Entry

To edit an entry:

1. In the row of the entry, click Edit.

2. Change the fields.

   For certificate and PFX entries, the stored file is kept unless you upload a new one.

3. Click Save.

Copying a Value

To copy the user name or password of an entry, click the copy button in the Username or Password column. Copied passwords are cleared from the clipboard after 20 seconds, as in the Password Vault.

Sharing an Entry

You can share an entry with other Keycyte PAM users. Shared entries appear in their Password Vault and, if linked to a server, on the account selection card of that server.

To share an entry:

1. In the row of the entry, click Share.

   A panel with the list of users opens.

2. Select the users to share the entry with. To select all users, use the checkbox in the column header.

3. For each user who may copy the password, select Copy. Users without Copy can use the entry to connect but cannot copy its password.

4. Click Share.

Shared entries are marked with a share icon in your list. To stop sharing with a user, clear the user in the same panel and click Share again.

Deleting an Entry

To delete an entry:

1. In the row of the entry, click Delete.
2. In the confirmation dialog, click Yes, Delete.