---
title: "System parameters - EPM report screen"
slug: "go-endpoint-manager-windows-system-parameters-1"
updated: 2026-11-03T14:47:50Z
published: 2026-11-03T14:47:50Z
canonical: "docs.senhasegura.io/go-endpoint-manager-windows-system-parameters-1"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# System parameters - EPM report screen

This document provides information about the **System parameters** screen for EPM, where administrators can configure global parameters for EPM on the Segura™ Platform.

## Path to access

1. On **Segura™ Platform**, in the navigation bar, hover over the **Products menu** and select **Settings**.
2. In the side menu, select **System Parameters > Global > EPM**.

or

1. On **Segura™ Platform**, in the navigation bar, hover over the **Products menu** and select **EPM**.
2. In the side menu, select **Management > Settings > Parameters**.

## EPM menu

### Installation settings section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Vault token** | Text field | No | EPM agent authentication token used to register the workstation in the Segura™ Platform. |

### Modules section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Enable Credentials? *** | Radio button | Yes | Defines whether the EPM agent user can view and copy credentials or start remote sessions, according to their access group. |
| **Enable applications? *** | Radio button | Yes | Defines whether the EPM agent user can run applications, elevate privileges, and perform impersonations. |
| **Enable uninstall? *** | Radio button | Yes | Defines whether the EPM agent user can access the uninstall applications module. |
| **Enable network share? *** | Radio button | Yes | Defines whether the EPM agent user can access the network sharing module. |
| **Enable network interface? *** | Radio button | Yes | Defines whether the EPM agent user can configure the operating system’s network adapters. |
| **Enable control panel? *** | Radio button | Yes | Defines whether the EPM agent user can access the operating system’s control panel. |
| **Enable Privilege Profile? *** | Radio button | Yes | Defines whether active privilege profiles are enabled and applied to the targets to manage access policies and rules. More information in [About privilege profiles](/v4-2/docs/general-epm-about-privilege-profiles). |

### General settings section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Enable offline use? *** | Radio button | Yes | Defines whether the EPM agent user can run applications without an active connection or registration in the Segura™ Platform. The workstation must be registered before the first offline use. |
| **Require PAM user? *** | Radio button | Yes | Defines whether if it is mandatory to associate the workstation user with a vault user in order to enable certain features that require a password or access group membership. |
| **Enable UAC integration? *** | Radio button | Yes | Defines whether integration with the credential provider (UAC) is enabled, allowing the EPM agent user to use the Segura™ Platform credentials to run applications. |
| **Enable application scan? *** | Radio button | Yes | Defines whether if the application scan functionality is enabled. |
| **Enable vault? *** | Radio button | Yes | Defines whether vault features are enabled, controlling when the EPM agent synchronizes credentials and how long they remain stored locally. Recommended for environments with a high volume of credentials. |
| **Enable recording session? *** | Radio button | Yes | Defines whether screen recording of workstations with sessions started through the EPM agent is enabled. |
| **Enable application malware and reputation scan? *** | Radio button | Yes | Defines whether the EPM agent performs malware scanning before executing applications. |
| **Minutes interval to request credentials** | Quantity input | No | Defines the time interval, in minutes, for retrieving and updating credentials from the Segura™ Platform. Attention: use this parameter with caution; it can overload the system. The lower the time, more resources will be used. |
| **Block access to network?** | Radio button | No | Defines whether the EPM agent should block processes attempting to communicate with destinations other than the Segura™ Platform. |
| **Block user** | Dropdown menu | No | Defines whether the EPM agent should block a user who exceeds the allowed number of processes communicating with unauthorized servers. Requires network blocking to be enabled. |
| **Occurrences (minimum)** | Quantity input | No | Defines the minimum number of occurrences before the user is blocked. |
| **Enable DLL analysis? *** | Radio button | Yes | Defines whether the EPM agent should analyze process DLLs. This parameter must be used with access lists, applying the same blocking policies to DLLs. |
| **Enable JIT access? *** | Radio button | Yes | Defines whether a non-administrator user can be temporarily added to the administrators group during a session. Access is revoked when the user ends the session or restarts the machine. |
| **New trusted directory** | Multi-record field | No | Defines directories considered trusted during access list analysis. |
| **Directory to be ignored** | Multi-record field | No | Defines directories to be ignored during application scanning for privilege elevation. |
| **Virus total API token** | Text field | No | Defines the VirusTotal API token used to perform malware analysis. |

### Authentication section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Enable multifactor authentication at login? *** | Radio button | Yes | Defines whether multifactor authentication is required when the user logs into the operating system. |
| **Enable multifactor authentication to elevate applications? *** | Radio button | Yes | Defines whether a multifactor token is required when the user requests application elevation. |
| **Enable Single Sign-On? *** | Radio button | Yes | Defines whether the authentication performed in Windows and the EPM agent can also be used to log into the Segura™ Platform. |

### Workflow settings section

#### Elevation settings

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **User can elevate applications** | Checkbox | No | Defines whether the user can elevate applications through the EPM agent. |
| **Enable Automatic Elevation** | Checkbox | No | Defines whether elevation also triggers automatically when the user double-clicks the application icon. Enabled by default. |
| **Require reason to elevate applications** | Checkbox | No | Defines whether the user must provide a justification to elevate an application. This option requires **User can elevate applications** to be enabled. |
| **Require approval to elevate applications** | Checkbox | No | Defines whether an approval workflow is required for application elevation. This option depends on **User can elevate applications** and **Require reason to elevate applications** being enabled. |
| **Approvals required** | Quantity input | No | Defines the minimum number of approvers required to authorize the user’s privilege elevation request. This option depends on **User can elevate applications** and **Require reason to elevate applications** being enabled. |
| **Disapprovals required to cancel** | Quantity input | No | Defines the number of rejections required to cancel an elevation request. |
| **Approval in levels** | Checkbox | No | Defines whether multi-level approval is enabled. |
| **Allow emergency access** | Checkbox | No | Defines whether the user can perform emergency access operations. |

#### Access request settings

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Governance ID required when justifying? *** | Radio button | Yes | Defines whether the user must provide a governance code when justifying access. |
| **Always add user manager to approvers? *** | Radio button | Yes | Defines whether the user’s manager is automatically added to the approver group. |

### Messages section

| Item | Type | Required | Description |
| --- | --- | --- | --- |
| **Execution message** | Text field | No | Defines the message displayed to the user when an application is executed by the EPM agent. |
| **Execution block message** | Text field | No | Defines the message displayed to the user when a blocked application is executed by the EPM agent. |