XTAM Update: Adds ephemeral account option to enforce zero standing access principle and adds custom icons for folders and records

Xton Access Manager Product Update 2.3.202009062236

Today we released new update to the Xton Privileged Access Manager software. This update adds ephemeral account option to enforce no standing access principle, and adds custom icons for folders and records.

Added ephemeral account option to enforce no standing access principle

The update adds Ephemeral Accounts option to provision temporary account with the requested privileges on the destination host just in time for the requested access removing the account after the requested access is expired. The option allows to enforce no standing access principle when servers under management have no unnecessary privileged access and not even accounts to exploit during majority of the server lifetime. PAM Server creates accounts with requested privileges just in time for the administrators to perform tasks on the server.

The update also adds just in time permission elevation option to enable account privileges on the destination host for duration of the requested access removing the privileges after the requested access is expired. This option allows to maintain the destination servers in no standing privileges state even though account themselves are present on the server. This step option be used as an intermediate step to transition to the no standing accounts option for just in time provisioning of ephemeral accounts.

The option is powered by After Approval and After Expire task execution triggers. Access request workflow run on the record with configured After Approval task will defer request approval for until the After Approval task will successfully complete by provisioning new account or elevating existing account privileges on the destination host. The After Expire task triggered after the requested access completes cleans up the provisioned account or removes privileges elevated by After Expire script.

The script run under After Approval policy might utilize LOGIN, DOMAIN, SHADOW_LOGIN and REASON (entered by user to request access) place-holders to make a decision about specific provisioning rules. In addition or instead of account provisioning or permission elevation on the destination server the After Approval script might rotate of provision new access certificates, enable firewall rules or change group policies to provide temporary access governed by the request workflow.

Added custom icons for folders and records

The update adds the option to define custom icon image and color for folders as well as for records of the selected record type. The option enables better visualization for different objects in the record list for quicker navigation through the folder structure and to simplify adoption of privileged access management practices.

Folder owners can define custom icon for folders using folder dropdown menu item Edit Icon in the record list. System administrators can define custom icons for records of selected record type using Edit Icon button on the Record Type management screen.

https://www.xtontech.com/resources/xton-access-manager-release-notes/

Please review key features documentation and product news using the links below

The software requires about five minutes to install on a freshly built Windows or Linux server or desktop with 2+ Gb RAM and no pre-requisites. After installation, please follow our Getting Started Guide for step-by-step introduction to the application.

Read the product documentation including Windows and Linux installation instructions as well as Getting Started Guide: https://www.xtontech.com/resources/documentation/

Follow this link for the instructions how to update the existing setup: https://www.xtontech.com/resources/faq/updating-xton-access-manager-version/

Check the software pricing, including options and licensing FAQ: https://www.xtontech.com/store/

We appreciate your feedback and comments about Xton Access Manager and also about handling privileged accounts, passwords, keys and certificates as well as sessions to remote computers in general.

Thank you for your interest in our product.
Xton Technologies team

Download Today!

Xton Access Manager for Privileged Access Management (PAM) provides complete, control for your privileged passwords, secrets, certificates and documents to meet audit requirements while limiting your risk of security breaches. It’s easy to install, affordable, cloud-ready and offers unlimited use and storage

Please fill out this form to receive a download link to get started today, even on your current desktop or laptop. Documentation is available to help or you can email or call us to request a trial extension, discuss questions and share your feedback. We would love to talk to you.