# Vault Release 17.1.0

{% hint style="success" %}
Get started by setting up your KeeperPAM sandbox! Visit [here](https://docs.keeper.io/keeperpam/privileged-access-manager/quick-start-sandbox) to begin.
{% endhint %}

KeeperPAM is now available for all customers. Keeper Vault 17.1 and newer is required to access the new privileged access management features.

For more information on KeeperPAM, visit the following:

* [Website](https://www.keepersecurity.com/privileged-access-management/)
* [KeeperPAM Documentation](https://docs.keeper.io/privileged-access-manager)

### New Features

* [**Optimized Password Rotation**](https://docs.keeper.io/keeperpam/privileged-access-manager/password-rotation/rotation-overview) - manage all rotations directly from the Vault UI
* [**Connections**](https://docs.keeper.io/keeperpam/privileged-access-manager/connections) **-** instantly and securely access assets within their target infrastructure
* [**Tunnels**](https://docs.keeper.io/keeperpam/privileged-access-manager/tunnels) - use native apps for establishing remote access
* [**Remote Browser Isolation**](https://docs.keeper.io/keeperpam/privileged-access-manager/remote-browser-isolation) - protect web-based apps
* [**Session Recordings and Playback**](https://docs.keeper.io/keeperpam/privileged-access-manager/session-recording-and-playback) - monitor usage for all privileged sessions
* [**Discovery**](https://docs.keeper.io/keeperpam/privileged-access-manager/discovery) - discover and onboard resources and accounts into Keeper
* [**Endpoint Privilege Manager**](https://docs.keeper.io/keeperpam/endpoint-privilege-manager) - controlling privilege across your fleet of devices.
* [**PAM Enforcement Policies (RBAC)**](https://docs.keeper.io/keeperpam/privileged-access-manager/getting-started/enforcement-policies) **-** PAM enforcement policies to enable and configure PAM feature permissions

{% hint style="info" %}
Activating KeeperPAM features requires a license. Contact your Keeper account representative for details.
{% endhint %}

### Improvements

* Browser tab now shows username: "Keeper® Vault - <user@company.com>"