Administration Console contains configuration information for Privileged Access Manager. If you federate your users with other servers, it stores configuration information about these users. You must protect Administration Console so that unauthorized users cannot change configuration settings or gain access to the information in the configuration store.
When using Privileged Access Manager on cloud, you must consider the following security recommendations:
The operating system packages must be updated. If you are using SUSE or Red Hat, ensure that the operating system is updated with the latest patch update.
It is recommended to not use keys of sizes less than 1024 bits on port 22.
It is recommended to install Privileged Access Manager on a private subnet to restrict the access to configuration data store.
When you develop a security plan for Privileged Access Manager, consider the following considerations: