Configuring Password Management in an Upgraded Setup

After upgrading Privileged Access Manager, if you want to enable password management, perform the following:

 

Tasks

Go To

  1. Review the prerequisites and ensure all the required configurations are complete.

Prerequisites for Configuring Password Management

  1. Review all password change and service tasks associated with the vault and update when the task must be scheduled for execution.

Credential Vault > Password Management

  1. (Conditional) By default, the out-of-the-box password policy provided by Privileged Access Manager is associated it with every vault. You can choose to use the default policy or create a new policy and associate with the vault.

    Ensure not to use '%', percentage character in the special characters list of the password policy.

Credential Vault > Password Policies > Help icon

  1. Perform the following on all the resources:

    1. Edit the resource and enable the Password Change option value in the Credential Vault > Resources > Edit icon Password Management. Also, review and modify all password management options, such as reconcile the account and so on.

      These password management values will be inherited by all credentials in the resource.

    2. (Conditional) If you do not want Privileged Access Manager to change reconcile account password, disable the Password Change option value in the Credential Vault > Resources > Edit icon Password Management in the appropriate resource credential.

      It is recommended that you disable the Password Change option value in the Credential Vault > Resources > Edit icon Password Management

      Also, you must have one local administration account, which Privileged Access Manager does not manage to resolve any password change issue.

    3. (Conditional) For Windows, if the credential is used as a service account, you must edit the credential and modify the service association.

    4. (Conditional) For Active Directory, if the credential is used as a service account in any of the Windows machine, you must add the Windows machine to the credential and update the service association.

Credential Vault > Vault Type > Vault Name > click edit icon of the required resource

Credential Vault > Vault Type > Vault Name > Resource Name > click edit icon of the required credential