1 of 100

KeeperPAM and Secrets Manager

Privileged Access Manager

Quick Start: Sandbox

Quickly and easily get started with a pre-configured PAM setup in your vault

Quick Start Wizard

To learn some KeeperPAM basics, we have created a wizard that is integrated into the Vault Preview. If you select the Docker install method, this wizard will create all the necessary vault records, configurations and a customized Docker Compose file for quickly standing up a sandbox environment.

Activate KeeperPAM

Login to the Preview Admin Console
Under Admin > Roles, create a new role for PAM or modify an existing role
Go to Enforcement Policies and open the "Privilege Access Manager" section.
Enable all the PAM enforcement policies
Ensure you are assigned to this role

Run the New Gateway Wizard

Login to the Keeper Vault Preview version. If the policies are active, you'll see a Secrets Manager tab on the left side.
Click on Create New > Gateway
Enter a name for the project, such as "My Infrastructure Demo"
Select Docker for the gateway
Select "Create with example records"
Click Next
After the wizard is finished, immediately download the provided Docker Compose file.

Run the Docker Environment

Set up a Linux VM in any target environment which supports Docker, such as an Amazon Linux 2 instance or similar.
If necessary, Install Docker per the Docker installation instructions.
Transfer the docker-compose.yml file from Step 2 to any Linux instance.
Run "docker-compose up" from the folder where the Docker Compose file is saved.

Test some PAM features

You should be able to instantly connect to any of the resources by clicking "Launch" from the record detail view.
The MySQL account, SSH password and SSH key can be rotated by clicking "Rotate" from the record detail within the Users folder.

Records Created

The wizard will create the following in your vault:

A folder containing Resources and Users in separate shared folders
A MySQL database
A few Linux machines with VNC, SSH and MySQL connection protocols.
A Secrets Manager Application and PAM Configuration with all PAM features enabled
A Keeper Gateway

Screenshots

Below are screenshots of the Quick Start Wizard from start to finish.

KeeperPAM and Secrets Manager

Privileged Access Manager

Quick Start: Sandbox

Quick Start Wizard

Activate KeeperPAM

Run the New Gateway Wizard

Run the Docker Environment

Test some PAM features

Records Created

Screenshots

Getting Started

The Basics

KeeperPAM Features

Secrets Manager Features

Commander CLI Features

Enterprise Password Manager

Architecture

Overview