Kron PAM Password Vault keeps all passwords in a secure, centralized vault, in fully encrypted form, and assigns strong, unique passwords to your target hosts. It also automates password randomization.

Learn about the Kron PAM Password Vault, a reliable solution to securely store and manage passwords. This document outlines its key features, including encrypted password storage, assigning strong and unique passwords, and automating password randomizatio

SFTP Proxy Transfer Performance Settings

Secrets

Adding Dynamic Accounts in Password Vault

Adding Dynamic Configured Static Accounts in Password Vault

Adding Static Configured Static Accounts in Vault

Export Vault Account

Account Tags

Adding Accounts in Password Vault

Password Vault SSH Key Rotation

Password Vault Account Permissions

Adding a New Password Vault Group

Editing a Password Vault  Group

Deleting a Password Vault Group

Adding a Password Vault Account to a Group

Adding Permissions to Password Vault Groups

Adding Child Groups (Sub-Groups) to Password Vault Account Groups

Properties for Password Vault Account Groups

Private Group for Password Vault Account

Password Vault Group

Check Out Account Password

Change Account Password Manually

Bulk Update Password

Check Account Password

Reset Account Password

Bulk Reset Account Password

Edit Account

Delete Account

Bulk Edit Account

Setting Account Level Properties in a Vault Configuration

Managed Systems

Adding Vault Configurations

Duplicating Vault Configurations

Configuration Property to Show Password to Multiple Users

Configuration Properties to Execute Commands After Changing Passwords

Configuration Property to Send Password Change Reminder 

Adding Cluster Accounts in Password Vault

Adding Auto Import Rules

New Account Notification Email Configuration

Editing New User Check Cronjob

Importing New Users to Password Vault

Deleting New Users

Discover New Users

Password Vault Accounts Bulk Import

Display Account Logs

Display Password History Log

Managing Passwords in a File

Password Vault Mail List Notifications

Configure Notifications

Password Vault Notification Settings

Auditor Users

End-Users

Account & Group Creator Users

Admin Users

Password Vault User Rights

Approval Configuration

Password Vault Admin & Manager Approval Roles

Manager User Approval Role

Account Based Approval Mechanism

Future Date Reservation

Split Password Feature

Password Validation Check

Web Application Password Management

Show Notes Option

Check Out Password Option

Connecting to a Target Device

Secret Notes

Set Manual Password for Dynamic Vault Accounts

Password Blacklist for Vault Static Accounts

Password Generator

Recycle Bin For Vault Accounts

Connect to Device

Vault Secondary Password Definition (Dual Lock)

Password Vault

3.9.0 Kron PAM Web GUI

License Manager

Email Server Configuration

Language Settings

Menu Lists Management

System Configuration Parameters

Enabling Push Notifications for Kron PAM Mobile Client Application

Enabling HTTPS on the Kron PAM Web GUI

Backup Management

Log Management

SAML Authentication

Hardware Security Module (HSM) Integration

Windows Authentication on the Kron PAM GUI

PKI Authentication

SMS Configuration

Kron PAM Administration

Bulk Operations

Manual User Creation

Kron PAM Users Search

User Actions Menu

Editing Kron PAM Users

Editing User Properties

Temporary User

Local User Bulk Import

New User Request

Force New User to Change Password 

User Password Strength Settings 

User Password Hash Algorithm Settings

Notifying Inactive Users Before Lock

LDAP/Active Directory Integration

Microsoft Entra ID Integration

User Group Creation

Assigned Credentials

SSH Keys Manager

User Management

Element Type

Device Groups

Device Inventory

Device Management

Policy Key Creation

Policy Groups Creation

Device Realm Creation

Policy Tracking

Policy Management

Managerial Approval for Connections 

Managerial Approval Connection Reservation

Managerial Policy Reservation

Managerial Approval for Commands

Managerial Approval in Shared Account Password Manager (Vault)

Approval Workflow

Approval Workflow SMS Settings

Approval Management

Connection Notifications

SSH Proxy

RDP Proxy

HTTP Proxy

Advanced Authorization Methods

User and Entity Behavior Analytics

OT/ICS Session Manager

SFTP Proxy

Session Manager

Application Token

Application Management

Audit

Cloud Secrets Manager

PAM JWT Authentication Overview

Secrets Management Agent

Sending the MFA QR Code to Users

Creating a Connection Between Kron PAM and the Kron PAM Mobile Client Application

Enabling Multi-Factor Authentication (MFA)

Using MFA to Log in to the Kron PAM Web GUI

Using MFA to Log in to the Kron PAM Desktop Client Application

Using MFA for SSH Connections

Using MFA for RDP Connections

Using MFA for SSH Proxy

Using MFA for HTTP Proxy

Using MFA for SFTP Proxy

Using MFA for OT/ICS Session Manager

Using MFA for TACACS+ Manager

Using MFA for Radius

Using MFA for Kron PAM Mobile Client Application

Using MFA for Remote Privileged Access Management (RPAM)

Offline Mode Settings

Using SMS for MFA

Using E-mail for MFA

Using Telegram for MFA

User Token Management

Using Hardware Tokens for MFA

Using Authentication Key (FIDO Key) for MFA

Using Keystroke for User Behavior Analytics

MFA Configurations for VPN Services

External MFA Providers

Multi-Factor Authentication

Basic Configurations for Unified Access Management

MSCHAPv2 RADIUS Configuration

TACACS+ Management Configuration Page 

Unified Access Manager

SQL Proxy

Database Session Logs and Activity Views

Kron DAM with Azure SQL Database

Single Sign-On (SSO)

Add Vault Account

Connection Reservation & Command Approval

Denial-of-Service (DoS) Protection

Buffer Overflow Attack Protection

Sensitive Data Discovery

Reports

Permit Zone

Database Discovery

APPENDIX 1: System Config Manager Parameters

APPENDIX 2: SQL Proxy Application Properties

Data Access Manager

Importing Devices from Amazon Web Services

Importing Devices from Microsoft Azure

Importing Devices from the Google Cloud Platform

Cloud PAM

CSP Account Definition

Enabling CIEM Service

Azure

Cloud Infrastructure Entitlement Management (CIEM)

Privileged Task Automation Authorization

Creating Script Group

Creating Script

Adding Script Realm

Running a Script

Privileged Task Automation

Reference Guide