Adding Static Configured Static Accounts in Vault
To configure Password Vault without the need for any system, a Password Vault account must be added. Authorized users can define their privileged users as Password Vault accounts, independently of the target device. Kron PAM retrieves the information of a Password Vault account and encrypts and stores the password in the Password Vault database.
To add a Static Configured Static Account:
- Navigate to Secrets > Vault.
- Open the Vault tab.
- Click on to Add button and select Add Account.
- Enter the Type (Static), Account Name, Description, Group Name, Private, Owner, Additional Info, Username, Password and Configuration. (Configuration is a predefined STATIC Strategy. Kron PAM has predefined configurations for Password Vault, but Static Strategy Configurations can be added from the Configuration tab without any device configuration.)
- Click Save.
There is a password counter feature for Static Configured Static Accounts. With this feature, an account in Password Vault cannot update the old password value in the counter specified.
To activate this feature, the following parameters have to be defined in the System Configuration Manager:
Parameter Name | Parameter Value |
|---|---|
sapm.old.password.history.enabled | true |
sapm.old.password.history.count | %number% (Default is 5) |