Using Privileged Access Manager, you can grant privileged access to Privileged Access Manager users either by elevating the user privilege or by providing privileged account credentials for checkout. The resource and credential details required to provide privileged access are stored securely in the Credential Vault, formerly known as Enterprise Credential Vault. The password of these credentials can be rotated periodically based on the compliance rule of the organization.
The credentials that are used to perform SSO by Privileged Access Manager are unknown to any administrator. Hence, these credentials must be rotated automatically by Privileged Access Manager to improve security. Similarly, the credentials used in service accounts are left unchanged, as it is tedious to detect all the service accounts, rotate their password, and restart the services. Using the password management feature of Privileged Access Manager, you can automate periodic rotation of service account password.
Password rotation is the process of regularly changing or resetting passwords (s). By reducing the amount of time a stolen password might be used, limiting the lifespan of a password lowers the danger from and efficacy of password-based attacks and exploits.The solution supports password updates for a wide range of platforms, including databases, routers, switches, operating systems (Windows and Unix), routers, and firewalls.