Installing Sectona Jump Host Component

The jump server is a hardened and monitored device that provides a controlled means of access between two dissimilar security zones. The Sectona Jump host is applicable in scenarios where isolated access is required to be provided for thick client based applications. A Jump server can be used as a single audit point of traffic.

Sectona Privileged Access Management system supports session management over Windows-based terminal server. This allows organizations to leverage session isolation capabilities and security of jump servers. Once you have configured a Windows server to act as a terminal server you are required to enable configuration via installation of the component to support the integration with Sectona Web Access components and terminal server.

Landing & Proxy Server settings in the system must be configured to use jump server settings to redirect user session requests to the jump server. This section describes the procedure for installing and configuring the system with Windows terminal server in detail.

Before You Begin

Before you begin with the installation of Sectona Jump Host component, ensure

• You have valid Login details of Sectona administrative user.

• You have local administrator privileges.

• You have already configured Sectona Web Access

In case of Production deployment, ensure you have RDP User CAL (Client Access License) for RDSH. For number of license please contact Sectona support.

By default RDSH will have 120 days grace period for RDP CAL.

Installation Procedure

The setting of Sectona Jump Host component requires setting up a web server and installation of Sectona Jump Host component.

• Installing Remote Desktop Services Roles and Features

• Installing the Sectona Vault Jump Host

• Setting Up the Sectona Client Environment

• Jump Host Service Configuration Parameters

Installing Remote Desktop Services Roles and Features

On the Jump Server, open the Server Manager window and click on Add Roles and Features.

You will be redirected to the Before You Begin window. Click on Next to continue.

You will be directed to the Installation Type window. Select either a Role-based or feature-based installation option. Click on Next to continue.

You will arrive at the Server Selection window. Select your preferred server and click on Next to continue.

You will find a window featuring various server roles. Click on Next to continue.

Select the following role(s) as described below:

After selecting the role, navigate directly to the Role Services window. Select the role service named Remote Desktop Session Host.

You will find a window listing various features. These will be installed after clicking on Add Features.

You will be redirected to a confirmation window. Click on Install to install the roles and features. After successful installation, a Results window is displayed. Click on Close to exit. Next, you need to restart the server to finish the installation.

The Sectona Jump Host requires a dedicated server for the jump server services.

Installing the Sectona Vault Jump Host

Download the Sectona Vault Jump Host Installer from the download portal. Launch the Sectona Vault Jump Host setup application. Once you run the application, you will be greeted with a Welcome page. Click on Next to continue.

Now select the installation path for the application by clicking on the Browse button. To check the required disk space, click on the Disk Cost button. You can install the Sectona Vault Jump Host either for yourself or anyone else who uses the computer by selecting Just me or Everyone option respectively. Click on Next to continue.

Click on Next to confirm the installation.

The installation process begins.

Once the installation is complete, click on Close to exit.

Setting Up the Sectona Client Environment

You need to transfer the Sectona.Client.Vault.sec file from the application server to the Jump Host server. The Sectona.Client.Vault.sec is required to run various applications on the Jump Host Server to achieve Single Sign-on and session isolation.

To transfer the files, go to the application server and navigate to C:\inetpub:\wwwroot\SectonaPAM\SystemData\Client.

Copy the Sectona.Client.Vault.sec in jump host server in the C:/ directory. Rename the file and add a .zip extension. Extract the zip file and name the folder as Sectona.Client.Vault.sec.

Now, add the Jump Host Server in Sectona PAM System configuration.

Jump Host Service Configuration Parameters

The above-mentioned parameters can be changed as per requirements. After the change in any configuration is done, ensure that you restart the Jump Host service to apply those changes.