Password Management

The Password Management (PAM) feature allows the credentials of shared privileged accounts to be securely stored and managed by using secrets (where these credentials are stored in encrypted form in the database), and role-based access control to be implemented. The system supports the JIT (Just in Time) PAM (Privileged Access Management) approach.

NOTE: This feature is only available with both an activated serial key for the Enterprise Edition of Ekran System, and a Workstation / Terminal Server / Terminal Server (Limited Sessions) license for the Client (jump server) computer via which users will get access to critical endpoints by using the Ekran System Connection Manager.

A stand-alone component of Ekran System, called Ekran System Application Credentials Broker (ACB) is also available, which is a REST API integration tool designed to allow customers to securely (with access token rotation) get the PAM secrets data for applications, without needing to log in to the Management Tool, in order to use for their own business purposes.

Table of Contents