System Requirements

Sectona PAM platform can run on a wide range of operating systems and databases, on physical or virtualized servers. This section provides a list of hardware sizing and software considerations. This section covers:

Resource requirements

System designers and administrators can use this guide to evaluate their deployment requirements. Since server load is difficult to predict, live testing is the best way to determine what hardware instances will be required in production. You may use the below-mentioned guidelines as a minimum recommendation for setting up your environments. System components can be deployed in virtual or physical hardware.

This section describes in details hardware requirement for

Deploying an evaluation setup with Enterprise edition
Deploying an evaluation setup with Standard Plus / Enterprise Plus edition
Deploying a production setup with Enterprise edition
Deploying a production setup with Enterprise Plus edition

Deploying an evaluation setup with Enterprise edition

Before initiating an installation, make sure that your resources meet the following minimum requirements:

Components	Need	Resource Requirement	RAM	Processor	Disk Space
Sectona Web Access and Proxy server. Vault Component	Mandatory	Windows Server 2016 or newer	8 GB	Intel 4 vCPU with 2.00 GHz or higher.	200 GB
Jump Host Component	Optional	Windows Server 2016 or newer	8 GB	Intel 4 vCPU with 2.00 GHz or higher	50 GB

Deploying an evaluation setup with Standard Plus / Enterprise Plus edition

Before initiating an installation, make sure that your hardware meets the following minimum requirements:

Components	Need	Hardware Requirement	RAM	Processor	Disk Space
Sectona Web Access and Proxy server Vault Component	Mandatory	Windows Server 2016 or newer and MS SQL server 2012 or newer	8 GB	Intel 4 vCPU with 2.00 GHz or higher	200 GB
Jump Host Component	Optional	Windows Server 2016 or newer	8 GB	Intel 4 vCPU with 2.00 GHz or higher	50 GB

Deploying a Production Environment with Enterprise Edition

Deployment sizing is primarily based on the number of concurrent users accessing the solution. The jump server integration is an optional requirement. Based on your network, additional proxy hosts can also be added. Below specifications are provided based on 50% concurrency of users.

Smaller environment for up to 50 users

Server	Need	Sizing	Hardware Requirement / OS	RAM	Cores	Disk Space
Sectona Web Access and Proxy server Vault Component	Mandatory	Concurrent User Managed Host	Windows Server 2016 or newer	12 GB	Intel 6 vCPU with 2.00 GHz or higher	400 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2016 or newer	4 GB	Intel 2 vCPU with 2.00 GHz or higher	50 GB
Jump Host Component	Optional	Considering 10 concurrent Sessions	Windows Server 2016 or newer	12 GB	Intel 8 vCPU with 2.00 GHz or higher	50 GB
Sectona External Session Proxy Component	Optional	Concurrent Sessions	Windows Server 2016 or newer	8 GB	Intel 4 vCPU with 2.00 GHz or higher	50 GB

Medium Scale Environments with up to 100 Users

Component	Need	Sizing	Hardware Requirement / OS	RAM	Cores	Disk Space
Sectona Web Access and Proxy server Vault Component	Mandatory	Concurrent Users Managed Host	Windows Server 2016 or newer	16 GB	Intel 8 vCPU with 2.00 GHz or higher	400 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2016 or newer	4 GB	Intel 2 vCPU with 2.00 GHz or higher	50 GB
Jump Host Component	Optional	Considering 20 concurrent Sessions	Windows Server 2016 or newer	16 GB	Intel 8 vCPU with 2.00 GHz or higher	50 GB
Sectona External Session Proxy Component	Optional	Concurrent Sessions	Windows Server 2016 or newer	8 GB	Intel 4 vCPU with 2.00 GHz or higher	50 GB

Large Environment with up to 250 Users

Component	Requirement	Sizing	Hardware Requirement / OS	RAM	Cores	Disk Space
Sectona Web Access and Proxy server	Mandatory	Concurrent Users Managed Host	Windows Server 2016 or newer	24 GB	Intel 8 vCPU with 2.00 GHz or higher	300 GB
Vault Component	Mandatory	Managed Host	Windows Server 2016 or newer / Shared database	16 GB	Intel 8 vCPU with 2.00 GHz or higher	300 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2016 or newer	4 GB	Intel 2 vCPU with 2.00 GHz or higher	50 GB
Jump Host Component	Optional	Considering 50 concurrent Sessions	Windows Server 2016 or newer	24 GB	Intel 12 vCPU with 2.00 GHz or higher	50 GB
Sectona External Session Proxy Component	Optional	Concurrent Sessions	Windows Server 2016 or newer	12 GB	Intel 4 vCPU with 2.00 GHz or higher	50 GB

General Considerations

The above hardware prerequisite for Production Environment is the minimum recommended configuration.
Jump Server/ Terminal Server configuration is considering 10, 15, and 20 concurrent user sessions for options 1, 2, and 3 respectively.
Satellite Vault Component is configured for syncing all the privilege accounts as an external backup other than PAM instance.
Refer to Section Installing High Availability Setup for setting up HA instances.
Refer to Section Installing Disaster Recovery Setup for setting up DR instances.

Deploying a Production Environment with Standard Plus / Enterprise Plus Edition

Recommended configuration is provided as a minimum configuration to kick start your installation.

Smaller environment for up to 50 users

Component	Requirement	Sizing	Hardware Requirement / OS	RAM	Cores	Disk Space
Sectona Web Access and Proxy server Vault Component	Mandatory	Concurrent User Managed Host	Windows Server 2016 or newer and MS SQL server 2012 or newer	12 GB	Intel 6 vCPU with 2.00 GHz or higher	400 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2016 or newer	4 GB	Intel 2 vCPU with 2.00 GHz or higher	50 GB
Jump Host Component	Optional	Considering 10 concurrent Sessions	Windows Server 2016 or newer	12 GB	Intel 8 vCPU with 2.00 GHz or higher	50 GB
Sectona External Session Proxy Component	Optional	Concurrent Sessions	Windows Server 2016 or newer	8 GB	Intel 4 vCPU with 2.00 GHz or higher	50 GB

Medium Scale Environments with up to 100 Users

Component	Requirement	Sizing	Hardware Requirement / OS	RAM	Cores	Disk Space
Sectona Web Access and Proxy server Vault Component	Mandatory	Concurrent Users Managed Host	Windows Server 2016 or newer and MS SQL server 2012 or newer	16 GB	Intel 8 vCPU with 2.00 GHz or higher	400 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2016 or newer	4 GB	Intel 2 vCPU with 2.00 GHz or higher	50 GB
Jump Host Component	Optional	Considering 20 concurrent Sessions	Windows Server 2016 or newer	16 GB	Intel 8 vCPU with 2.00 GHz or higher	50 GB
Sectona External Proxy Component	Optional	Concurrent Sessions	Windows based Server 2016 or newer	8 GB	Intel 4 vCPU with 2.00 GHz or higher	50 GB

Large Environment with up to 250 Users

Component	Requirement	Sizing	Hardware Requirement / OS	RAM	Cores	Disk Space
Sectona Web Access and Proxy server	Mandatory	Concurrent Users Managed Host	Windows Server 2012 R2 or newer	24 GB	Intel 16 vCPU with 2.00 GHz or higher	300 GB
Vault Component	Mandatory	Managed Host	Windows Server 2012 R2 or newer and MS SQL server 2012 or newer	16 GB	Intel 8 vCPU with 2.00 GHz or higher	300 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2012 R2 or newer	4 GB	Intel 2 vCPU with 2.00 GHz or higher	50 GB
Jump Host Component	Optional	Considering 50 concurrent Sessions	Windows Server 2012 R2 or newer	24 GB	Intel 12 vCPU with 2.00 GHz or higher	50 GB
Sectona External Session Proxy Component	Optional	Concurrent Sessions	Windows Server 2012 R2 or newer	12 GB	Intel 4 vCPU with 2.00 GHz or higher	50 GB

General Considerations

The above hardware prerequisite for Production Environment is the minimum recommended configuration.
Jump Server/ Terminal Server configuration is considering 10, 15, and 20 concurrent user sessions for options 1, 2, and 3 respectively.
Satellite Vault Component is configured for syncing all the privilege accounts as an external backup other than PAM instance.
Refer to Section Installing High Availability Setup for setting up HA instances.
Refer to Section Installing Disaster Recovery Setup for setting up DR instances.

Recommendation for deploying in cloud environments

This section describes the recommended hardware requirements for:

Deploying an evaluation setup with Enterprise edition
Deploying an evaluation setup with Standard Plus / Enterprise Plus edition
Deploying a production setup with Enterprise edition
Deploying a production setup with Enterprise Plus edition

Deploying an evaluation setup with Enterprise edition on cloud

Before initiating Sectona PAM installation, make sure that your hardware meets the following minimum requirements:

Components	Requirement	OS	Amazon Web Services	Disk Space
Sectona Web Access Vault Component	Mandatory	Windows Server 2016 or newer	t3.large	200 GB
Jump Host Component	Optional	Windows Server 2016 or newer	t3.medium	50 GB

Deploying an evaluation setup with Standard Plus / Enterprise Plus edition on cloud

Before initiating installation, make sure that your hardware meets the following minimum requirements:

Components	Requirement	OS	Amazon Web Services	Disk Space
Sectona Web Access Vault Component	Mandatory	Windows Server 2016 or newer and MS SQL server 2012 or newer	t3.large	200 GB
Jump Host Component	Optional	Windows Server 2016 or newer	t3.medium	40 GB

Deploying a Production Environment with Enterprise Edition on cloud

Deployment sizing is primarily based on the number of concurrent users accessing the solution. The jump server integration is an optional requirement. Based on your network, additional proxy hosts can also be added. Below specifications are provided based on 50% concurrency of users.

Smaller environment for up to 50 users

Component	Requirement	Sizing	Hardware Requirement / OS	Amazon Web Services	Disk Space
Sectona Web Access and Proxy server Vault Component	Mandatory	Concurrent User Managed Host	Windows Server 2016 or newer	t3.xlarge	400 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2016 or newer	t3.medium	50 GB
Jump Host Component	Optional	Considering 10 concurrent Sessions	Windows Server 2016 or newer	t3.large	50 GB
Sectona External Session Proxy Component	Optional	Concurrent Sessions	Windows Server 2016 or newer	t3.large	50 GB

Medium Scale Environments with up to 100 Users

Component	Requirement	Sizing	Hardware Requirement / OS	Amazon Web Services	Disk Space
Sectona Web Access and Proxy service Vault Component	Mandatory	Concurrent Users Managed Host	Windows Server 2016 or newer	t3.xlarge	400 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2016 or newer	t3.medium	50 GB
Jump Host Component	Optional	Considering 20 concurrent Sessions	Windows Server 2016 or newer	t3.large	50 GB
Vault Session Proxy Host Component	Optional	Concurrent Sessions	Windows Server 2016 or newer	t3.large	50 GB

Large Environment with up to 250 Users

Component	Requirement	Sizing	Hardware Requirement / OS	AWS Web Services	Disk Space
Sectona Web Access and Proxy server	Mandatory	Concurrent Users Managed Host	Windows Server 2016 or newer	t3.xlarge	200 GB
Vault Component	Mandatory	Concurrent users Managed Host	Windows Server 2016 or newer/ RDS Instance	t3.xlarge	300 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2012 R2 or newer	t3.medium	50 GB
Jump Host Component	Optional	Considering 50 concurrent Sessions	Windows Server 2012 R2 or newer	t3.2xlarge	50 GB
Sectona External Session Proxy Component	Optional	Concurrent Sessions	Windows Server 2012 R2 or newer	t3.xlarge	50 GB

General Considerations

The above hardware prerequisite for Production Environment is the minimum recommended configuration.
Jump Server/ Terminal Server configuration is considering 10, 15, and 20 concurrent user sessions for options 1, 2, and 3 respectively.
Satellite Vault Component is configured for syncing all the privilege accounts as an external backup other than PAM instance.
Refer to Section Installing High Availability Setup for setting up HA instances.
Refer to Section Installing Disaster Recovery Setup for setting up DR instances.

Deploying a Production Environment with Standard Plus / Enterprise Plus Edition on cloud

Deployment sizing is primarily based on the number of concurrent users accessing the solution. The jump server integration is an optional requirement. Based on your network, additional proxy hosts can also be added. Below specifications are provided based on 50% concurrency of users.

Smaller environment for up to 50 users

Component	Requirement	Sizing	Hardware Requirement / OS	Amazon Web Services	Disk Space
Sectona Web Access and Proxy server Vault Component	Mandatory	Concurrent User Managed Host	Windows Server 2016 or newer	t3.xlarge	300 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2016 or newer	t3.medium	50 GB
Jump Host Component	Optional	Considering 10 concurrent Sessions	Windows Server 2016 or newer	t3.large	50 GB
Sectona External Session Proxy Component	Optional	Concurrent Sessions	Windows Server 2016 or newer	t3.large	50 GB

Medium Scale Environments with up to 100 Users

Component	Requirement	Sizing	Hardware Requirement / OS	Amazon Web Services	Disk Space
Sectona Web Access and Proxy server Vault Component	Mandatory	Concurrent Users Managed Host	Windows Server 2016 or newer	t3.xlarge	400 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2016 or newer	t3.medium	50 GB
Jump Host Component	Optional	Considering 20 concurrent Sessions	Windows Server 2016 or newer	t3.large	50 GB
Sectona External Session Proxy Component	Optional	Concurrent Sessions	Windows Server 2016 or newer	t3.large	50 GB

Large Environment with up to 250 Users

Component	Requirement	Sizing	Hardware Requirement / OS	Amazon Web Services	Disk Space
Sectona Web Access and Proxy server	Mandatory	Concurrent Users Managed Host	Windows Server 2016 or newer	t3.2xlarge	200 GB
Vault Component	Mandatory	Concurrent users Managed Host	Windows Server 2012 R2 or newer	t3.xlarge	300 GB
Satellite Vault Component	Mandatory	Managed Host	Windows 10 workstation/ Windows Server 2012 R2 or newer	t3.medium	50 GB
Jump Host Component	Optional	Considering 50 concurrent Sessions	Windows Server 2012 R2 or newer	t3.2xlarge	50 GB
Sectona External Session Proxy Component	Optional	Concurrent Sessions	Windows Server 2012 R2 or newer	t3.xlarge	50 GB

General Considerations

The above hardware prerequisite for Production Environment is the minimum recommended configuration.
Jump Server/ Terminal Server configuration is considering 10, 15, and 20 concurrent user sessions for options 1, 2, and 3 respectively.
Satellite Vault Component is configured for syncing all the privilege accounts as an external backup other than PAM instance.
Refer to Section Installing High Availability Setup for setting up HA instances.
Refer to Section Installing Disaster Recovery Setup for setting up DR instances.

Software Considerations

Refer below for detailed information about component-wise software requirements:

Sectona Component	Operating System	Database	Run-time	Web Server
Sectona PAM Web Access	Windows based server	-	.Net framework 4.5.2 or above Visual C++ 2013 & above	Microsoft Internet Information Services 8 or above
Vault Component	Windows based server	-	Visual C++ 2015 & above	-
Vault Component (with External RDBMS)	Windows based server	Microsoft SQL	-	-
Jump Host Component	Windows based server	-	.Net framework 4.5.2 or above	-
Proxy Host	Windows based server	-	.Net framework 4.5.2 or above	-

Supported Operating System

Windows Server 2016
Windows Server 2019
Windows Workstation 10

Browsers Supported

All HTML 5 compliant browsers are supported by Sectona PAM system.

Operating System	Browser
Windows	Internet Explorer 10 or Higher
Windows	Microsoft Edge
Windows/Ubuntu desktop	Chrome
Windows/Ubuntu desktop	Firefox
MAC OS	Safari

Supported External RDBMS with Standard Plus / Enterprise Plus Edition

Following Microsoft SQL Server editions are tested for deployments

Microsoft SQL Server 2012
Microsoft SQL Server 2014
Microsoft SQL Server 2016
Microsoft SQL Server 2017
Microsoft SQL Server 2019

This table provides recommendation based on production editions for deployment

Sectona Deployment	Express	Standard	Enterprise
Evaluation	Yes	Yes	Yes
Production	No	Yes	Yes

Video Log sizing recommendation

This table describes the recommended storage requirement for retaining privileged session video logs as per the number of users, duration and days

Number of users	Duration per user (in hours)	Retention period (in days)	Storage required
50	8	60	700 GB
100	8	60	1.5 TB
250	8	60	3.5 TB

The Video Log sizing is based on the activity done by per user, per hour. Only the active sessions are recorded.