Vault

  • 1 minute(s) read
Prev Next

The application enables the caching, viewing, and copying of credentials. These actions are equivalent to using a proxy, preview, or copy through the web interface. SIEM will audit and relay all these actions.

When opening the application, you can find:

  • In the top left corner is the search bar.
  • In the top right corner is the Refresh button.
  • Below the Search bar, you have the titles:
    • User: the default credential for privilege elevation actions inside and outside the Vault.
    • Domain: the name of the device's domain
    • Device: the device associated with the credential.
Info

If the default credential doesn't have a registered domain, it will display the machine name instead.

Use a credential

Users in Vault are always associated with the accounts they use to log into Windows.

Attention

The workstation username must have an equivalent user in the Segura platform. If you are not sure about the username, read the article Requirements.

  1. Access the user's desktop.
  2. Start Vault.
  3. Select the credential you want to use from the list of credentials.
  4. Right-click on the automation.
  5. Click Copy or Show to access the password.

Use a credential in case of unavailability

In cases of unavailability of the Segura platform. The Vault stores the user and password credentials locally. It is encrypted and keeps the information from the last update. So the user can view and copy the credentials and password.

  1. Access the Segura platform.
  2. Go to EPM > Management > Settings > Parameters > EPM.
  3. In modules, activate the option Enable credentials?.
  4. Click on Save.
  5. Access the user's workstation, and follow the steps to use a credential.
Attention

This feature does not work in conjunction with offline mode.

Configure Token requests to view or copy credential

  1. Access the Segura platform.
  2. Configure MFA OTP token.
  3. Go to EPM > Settings > Parameters > Security.
  4. Check the option Force Multi-Factor Authentication to view password? or Force Multi-Factor Authentication to login? to Yes.
  5. The user will be prompted to fill in a token to copy or view the credential.

Configure verification of local privileged credentials

  1. Access the Segura platform.
  2. Access the menu EPM > Settings > Parameters > EPM.
  3. Go to the Report section.
  4. Check the option Enable local privileged credentials checking?.
  5. Set days and times for execution.
  6. Click Save.