Skip to main content

Contact Support
Download Resources

Main

Contact Support
Download Resources

Main

Getting Started

Release Notes

Version 5.5.0

Installation & Setup

Planning to Deploy

Service Architecture Overview
System Requirements
Deployment Scenarios
Setting up test environment
Standard Port Requirement for Installation

Installing Sectona Components

Installing Vault Component
Installing Sectona Web Access
Installing Sectona Jump Host Component
Installing Sectona File Synchronization Component
Installing Session & Web Session Proxy Component
Installing Sectona Satellite Vault Component
Installing Sectona Vault API Extension
Installing Sectona Client App
Installing Sectona Windows Monitoring Component
Installing Sectona Launcher
Installing Sectona Remote Access Publisher Component
Installing Sectona Remote Session Host
Install and Setup WSSL Proxy

Building a High Availability Setup

Key Concepts and Components of a High-Availability System
Availability Consideration for Platform Components
Configuring Sectona Web Access for High Availability
Configuring Vault for High Availability

Configuring Disaster Recovery Setup
Migrating from evaluation to production
Rebuilding your setup
Upgrading the System

Configure & Implement

General Configurations

Setting up a network proxy
Applying conditions with tags
Configuring HTTPs certificate
Updating default system settings
Customizing web application appearance & site settings
Defining network zones
Configuring location tagging
Setting criticality level tags
Managing video recording settings
Configure Email settings
Adding new LDAP/LDAPs directory

Configuring user authentication

LDAP/LDAPs supported directories

SAML authentication

OneLogin SAML
Okta SAML
Duo SAML

Radius authentication
Sectona Authentication

Configuring the setup for Password Rotation in Windows and Unix Privilege Account

Securing & Monitoring Sessions

Configuring RDPD Proxy
Configuring Remote Session Host
Configuring a Session Proxy & Web Session Proxy
Configuring Jump Host
Configuring SSHD Proxy
Configuring Access from an Unvaulted Account

Integrating Ticketing Systems

Jira Cloud

Configuring Multi-factor authentication

Sectona MFA
DUO MFA
Okta MFA
OneLogin MFA
Google Authenticator
RSA SecureID
Vasco
Generic RADIUS
Microsoft Authenticator
FIDO2
Biometric

Working with multi-tenant environment
Backing up, Restoring, and Archival

Configuring Notifications

Key concepts & Capabilties of Notification Service
Architecture & flow of Notification Service
Using Notification templates
Setting up Notifications

Configuring Satellite Vault for break glass

Accessing Satellite Vault

Forwarding Logs

Administer

Managing assets & access types

Adding assets in the system
Managing access types

Configuring a Kubernetes Cluster

Managing accounts & keys

Onboarding accounts in vault
Managing account operations

Working with account groups

Account group management
Account group operations

Managing user & authentication

Adding users in the system
Managing user roles
User authentication settings
Defining user groups
Setting up user access policy
Setting up Logon Policy
Assigning policy-based access to users
Managing user operations

Setting up password management

Configuring password rotation policy
Configuring reconciliation policy
Configuring Password Checkout
Configuring password policy
Configuring management account

Enabling Just-in-time Access

Windows platforms
Unix platforms

Workflow-based access

Enabling Maker Checker

Managing & reviewing session Logs

View Session Recordings
Viewing password checkout history
Viewing Live Sessions
Reviewing sessions
Monitoring or terminating live sessions
Adjusting Session Risk Scoring & Threat Analytics Parameters

Managing server privileges

Command Restriction for SSH
Database Query Restriction
Application Control for Windows

Reporting & analytics

Viewing & exporting reports
Scheduling a Report
Designing & customizing reports

Automating Privileged Tasks

PTM key concepts & capabilities
Architecture, flow, & advantages of PTM
PTM Libraries
Configuring Tasks

Account Lifecycle Management

Account Provisioning
Manage Provisioned Accounts

Windows Monitoring Agent
Unix Monitoring Agent

Managing the system

Monitoring System Health & Service Status
Dashboard
Managing Licenses
Using troubleshooting utilities
Auditing system changes

Running discovery

Viewing Discovery Map
Handling assets and accounts manually from discovery
Schedule account discovery jobs

Configuring credentials

Sectona Vault Credential Resolver for ServiceNow

Setting up asset discovery

Microsoft Azure Resources
Amazon Web Services (AWS) resources
Network scan
Google Cloud
SNMP Discovery
VMware workloads
Hyper-V Asset Scan
Active Directory (AD)

Develop

Vault API Registration
HTTP POST Headers

Management APIs

API - Manage User
API - Manage Asset
API - Manage Account
API - Get Instance Information
API - Get User Groups Information
API - Get Users by Group
API - Get Users Information
API - Map, Un-map User with User Group
API - Get Assets
API - Get Account Groups
API - Get Accounts by Asset
API - Authentication using OAuth Access Token
API - Get Accounts by Account Groups
API - Map Un-map Account with Account Group
API - Get Entitlement
API - Get Discovered Accounts
API - Get Discovered Assets
SCIM API - User Creation
SCIM API - User Modification

Vault Password API Headers

Password Vault APIs

API - Password Vault

Response Error Codes

Use

Launching the product

Accessing a Target Asset

Collaborating session
Working with assets

Using workflow

Raising a request
Managing approvals

Executing tasks
Accessing secrets during break glass

Breadcrumbs

Privileged Access Management
Administer

On this Page

Managing the system

This section covers details about managing audit events by system administrators, managing system health & services, etc.

Monitoring System Health & Service Status
Dashboard
Managing Licenses
Using troubleshooting utilities
Auditing system changes

EULA
Terms
Privacy Policy

Copyright
Powered by Scroll Sites & Atlassian Confluence