KeeperPAM Licensing

Features included with the PAM License

KeeperPAM Licensing Requirements

In order to enable and use KeeperPAM, the following are required:

• Keeper Business or Keeper Enterprise License

• Privileged Access Manager Add-On

  • A minimum of 5 seats

A Keeper Business or Keeper Enterprise License is required to purchase the KeeperPAM add-on.

Trial License

If you are not a Keeper customer or do not have the required license, you can start a free enterprise license trial. The enterprise trial will also include the Privileged Access Manager Add-on.

Features Included with KeeperPAM

With the purchase of the Privileged Access Manager add-on, the following features are included:

• Secrets Manager - Unlimited API Calls

• Password Rotation

• Connections

• Tunnels

• Remote Browser Isolation

• Session Recordings and Playback

• Discovery

• Keeper Connection Manager (Self-Hosted)

• PAM Audit and Reporting

What is the difference between KeeperPAM and Keeper Connection Manager (Self-Hosted)?

KeeperPAM is a cloud-native privileged access solution that requires only a lightweight gateway installation, while Keeper Connection Manager (KCM) is a fully self-hosted solution. For more information, visit this page.

KeeperPAM License Model

The KeeperPAM add-on license includes all the advanced PAM Features. The number of licenses for the enterprise license and the KeeperPAM license is based on:

License Type	License Model
Business or Enterprise License	Number of Users using the Business or Enterprise Features
Privileged Access Manager Add-On	Number of Users using the Business or Enterprise Features AND PAM Features

Example

For example, if an organization has 100 Enterprise users and needs PAM functionality for only 10 of them, they would purchase:

• 100 Keeper Enterprise Licenses for users who only need the enterprise features.

• 10 Privileged Access Manager Add-Ons, to cover the 10 users that need PAM functionality.

MSPs

Keeper’s MSP Consumption Model allows MSPs and their Managed Companies (MCs) to allocate Keeper licenses to their users and pay only for used licenses at the beginning of the following month.

KeeperPAM will be a Secure Add-On that MSPs can add or remove at any time for their Managed Companies.

Features available with the KeeperPAM Add-On are listed here.

Existing Customers - Updating KSM/KCM Add-Ons

For existing customers, the following existing Add-ons can be upgraded to the Privileged Access Manager Add-On:

• Keeper Secrets Manager Add-On

• Keeper Connection Manager Add-On

Both the Keeper Secrets Manager and Keeper Connection Manager Add-Ons are included as part of the Privileged Access Manager Add-On.

Upgrading from Keeper Secrets Manager Add-On

Upgrading to the Privileged Access Manager Add-On from the Keeper Secrets Manager Add-On will give you:

• Access to new KeeperPAM Features

• Unlimited API Calls

Upgrading from Keeper Connection Manager Add-On

Upgrading to the Privileged Access Manager Add-On from the Keeper Connection Manager Add-On will give you new KeeperPAM Features which includes accessing both the cloud and self-hosted KCM.

Ready to Upgrade?

To purchase, upgrade, or if you have any questions, contact your Keeper account manager or use our online form.