Privileged Account Manager Administration Guide
- Privileged Account Manager Administration Guide
- NetIQ Privileged Account Manager - An Overview
- Main Features of Privileged Account Manager
- Primary Components
- Framework Manager
- Framework Agent
- The Privileged Account Manager User Interface
- New Console: Navigation Pane
- Old Console: Navigation Pane
- Getting Started
- Managing Privileges in Various Endpoints
- Discovering Privileged Accounts
- Types of Accounts Discovered
- Administrative Accounts
- Service Accounts
- Launching Privileged Account Sniffer
- Configuring Privileged Account Sniffer
- Discovering Accounts
- Discovery Reports
- Filtering Report Data
- Importing and Exporting Configuration
- Managing Framework Hosts
- Managing Domains
- Creating a Domain
- Modifying a Domain
- Deleting a Domain
- Managing and Monitoring Hosts
- Deployment Dashboard
- Adding a Host
- Viewing Host Details
- Modifying a Host
- Registering Hosts
- Deleting a Host
- Moving a Host
- Finding a Host
- Monitoring Hosts
- Managing System Alerts
- Modifying Alert Settings
- Enabling Crash Dump Capture
- Managing Host Packages
- Finding Packages on Hosts
- Updating Packages for a Host
- Rolling Back Packages
- Committing Packages
- Registering and Unregistering Packages for a Host
- Installing Packages on a Host
- Uninstalling Packages from a Host
- Modifying Audit Settings for the Audit Manager Package
- Configuring SMTP Settings for the Messaging Component Package
- Configuring Settings for the dbaudit Package
- Managing Audit Zones
- Securing Access to the Framework Manager Console
- Requesting a Certificate for the Framework Manager Console
- Modifying the Connector
- SSL Renegotiation DOS Attack Protection
- Managing Users and Groups
- Managing Groups
- Predefined User Groups
- Adding a User Group
- Modifying a User Group
- Configuring Permissions
- Deleting a User Group
- Managing Users
- Adding a User
- Modifying User
- Removing a User from a User Group
- Deleting a User
- Changing a User’s Password
- Assigning Permissions for LDAP Users
- Configuring External Authentication
- LDAP Servers
- Advanced Authentication
- Benefits of Integration with Advanced Authentication
- Advanced Authentication Terminologies and Their Usage
- Checklist to Follow Before Enabling Secondary Authentication
- Configuring Advanced Authentication Server
- Supported Authentication Methods
- Configuring the Advanced Authentication Server Details in Privileged Account Manager
- Enabling Advanced Authentication for Privileged Access
- Secondary Authentication Server Setting
- Enabling Advanced Authentication for Administration Console
- RADIUS Server
- Configuring Privileged Access
- Access Control
- Components of Access Control
- Configuring Resource Pools
- Configuring User Roles
- Configuring Assignments
- Configuring Permissions
- Advanced Configurations
- Command Control
- Installing and Deploying Command Control
- Command Control User Interface
- Configuring Command Control
- Commands
- Command Control Options
- Creating Default Objects
- Disconnecting a Privileged Session
- Emergency Access Requests
- Configuring Emergency Access Settings
- Agent and Agentless Capability
- Agent and Agentless Capabilities in Privileged Account Manager - Tabular Overview
- Privileged Access to Windows
- Work Flow to Configure Privileged Access for Windows
- Agent-Based Session Management In Windows
- Agentless Session Management in Windows
- Application Management
- LDAP Group Lookup
- Privileged Access to UNIX and Linux
- Workflow to Configure UNIX and Linux Privileged Sessions
- Agent-Based Session Management in Unix and Linux
- Agentless Session Management in Unix and Linux
- Command Management
- Enhanced Access Control
- Privileged Access to Databases
- Database Access Through Credential Checkout
- Configuring Credential Checkout for Oracle Database
- Configuring Credential Checkout for Other Databases
- Checking Out Database Credentials
- Database Access Through Privileged Account Manager Proxy
- Viewing Database Activity
- Privileged Access to Applications and Cloud Services
- Application SSO
- RemoteApp Mode
- Direct Access Mode
- Working with Credentials
- Credential Checkout
- Configuring Credential Checkout for Applications
- Configuring Credential Checkout for Cloud Services
- Configuring Credential Checkout Settings
- Checking Out Credentials
- Password Reset Scripts
- Shared Keys
- Types of Shared Key
- Enabling the Key Checkout for Shared Key
- Managing Credentials for Shared Key
- Password Management
- Understanding Password Management
- Password Management for Windows, Active Directory, Linux, and Network Devices
- Prerequisites
- Password Management for Database and Applications
- Application to Application Password Management
- Configuring AAPM
- Viewing Activities Performed Using API Tokens
- Reports
- Creating Reports
- Sessions
- Administrator Activities
- Credential Checkouts
- Shared Key Checkouts
- Using Audit Settings
- Using Encryption Settings
- Configuring Video Capture
- Viewing the Videos
- Video Off-Load
- Change Management
- Password Management
- Enabling Password Management
- Viewing Report Data
- Shared Key Management
- Enabling Shared Key Management
- Using Compliance Auditor
- Controlling Access to the Compliance Auditor
- Compliance Audit Rules
- Adding or Modifying an Audit Rule
- Compliance Audit Reports
- Compliance Auditor Records
- Viewing a Compliance Audit Record
- Deploying the Compliance Auditor
- Integration with External Services
- Integrating with ArcSight Intelligence
- Example Scenarios
- Configuring ArcSight Intelligence Details
- Integrating with Identity Manager
- Benefits of Integration with Identity Manager
- Integrating with Sentinel Server
- Using Syslog Settings
- Integration with Ticketing Systems
- Configuration for Normal Access
- Configuration for Elevated Access
- Integrating with NetIQ Access Manager
- Command Line Options
- The unifi Options
- Command Control Options
- Importing and Exporting Command Control Settings
- Backing Up and Restoring a Command Control Configuration
- Running Test Suites
- Package Distribution Options
- Package Manager Options
- Install and Uninstall Packages
- Upgrade and Rollback Packages
- Registry Agent Options
- Registering an Agent
- Finding a Primary Manager Package
- Agent Status
- Adding Hosts and Domains
- Registry Manager Options
- Compliance Auditor Options
- Exporting and Importing Compliance Auditor Settings
- Managing Compliance Auditor Records
- sreplay Command Line Options
- Troubleshooting
- General Issues
- The Agent is in an Offline State
- The Audit Events are Not Displayed in the Reports Console Even When the Events are Generated
- On an AIX Platform, When the Audit Data Gets Generated in Large Amount, The Privileged Account Manager Service Restarts and an Error is Displayed in the unifid.log file.
- The RDP Relay Session Does Not Start From the User Console
- The RDP Relay to a Windows Server 2012 Server Fails
- The Privileged Session is Not Established Through the Backup Manager
- The Changes to the Syslog Settings Do Not Get Applied
- The Manual Disconnect for a Windows session Does Not Work
- The Run as privileged user Option is not displayed on a Windows 2012 Server
- Agent Registration Fails on a Windows Platform
- Direct RDP Sessions are Enabled for all Users By Default
- Issues When Updating or Downloading the License Summary
- Failed to connect to module
- The system cannot process the details because one or more agents that have the DB Audit module is in Offline state
- The system cannot process the details because it cannot contact any of the Credential Vault modules
- SSL Connection to Microsoft SQL Sever Fails with a Timeout Error
- RDP Relay to Windows 10 or Windows 2016 Fails with a Network Authentication Error
- SSO to Application Does Not Happen When There are multiple Concurrent Sessions to the Application SSO Host
- Troubleshooting Issues Related with Managing Hosts
- Promoting Managers When the Primary Manager Fails
- Viewing Store and Forward Messages
- Managing Low Disk Space
- Restarting the Agent
- Managing the Registry Cache
- Time Synchronization
- Issues While Integrating with Advanced Authentication
- Advanced Authentication Server is Down and Users Cannot Log In to Privileged Account Manager End-Points
- Appendix: Legacy Roles
- Legal Notice