Adding Static Configured Static Accounts in Vault
To configure the Password Vault without a target system, add a Password Vault account. Authorized users can define their privileged users as Password Vault accounts, independent of the target device. Kron PAM retrieves the Password Vault account information, encrypts the password, and stores it in the Password Vault database.
To add a static configured static account:
- Navigate to Secrets > Vault.
- Open the Vault tab.
- Click +Add and select Add Account.
- Enter the Type (Static), Account Subtype (Persistent), Account Name, Description, Group Name, Private, Owner, Additional Info, Username, Password, and Configuration. Configuration is a predefined static strategy. Kron PAM has predefined configurations for the Password Vault, but you can add static strategy configurations from the Configuration tab without any device configuration.
- Click Save.
Static configured static accounts have a password counter feature. With this feature, an account in the Password Vault cannot reuse an old password value within the specified count. To activate this feature, define the following parameters in System Configuration Manager:
Parameter Name | Parameter Value |
|---|---|
sapm.old.password.history.enabled | true |
sapm.old.password.history.count | %number% (Default is 5) |