# Installing PAM360 Application

To install PAM360, follow the installation procedure that best suits your operating system and environment. Ensure that all [prerequisites](https://www.manageengine.com/privileged-access-management/help/requirements.html#Prerequisites) are met before beginning the installation. For detailed information on each component and its capabilities, refer to the [basic requirements](https://www.manageengine.com/privileged-access-management/help/requirements.html#Hardware_Requirements) document. This guide provides step-by-step instructions for installing PAM360 on various operating systems. You can navigate to specific sections using the links provided below or scroll down for more information.

Each section offers a comprehensive step tailored to different operating systems, ensuring a smooth and efficient installation process for PAM360.

1. [Installing PAM360 on Windows](https://www.manageengine.com/privileged-access-management/help/installation.html#Installation_on_Windows)
2. [Installing PAM360 on Windows Core Server](https://www.manageengine.com/privileged-access-management/help/installation.html#Installation_on_Windows_Core_Server)
3. [Installing PAM360 on Linux](https://www.manageengine.com/privileged-access-management/help/installation.html#Installation_on_Linux)
4. [Silent Installation](https://www.manageengine.com/privileged-access-management/help/installation.html#Silent_Installation)
5. [Transferring a PAM360 Installation](https://www.manageengine.com/privileged-access-management/help/installation.html#Transferring_PAM360_Installation)

## 1. Installing PAM360 on Windows

1. To begin the installation, double click the downloaded [ManageEngine_PAM360.exe](https://www.manageengine.com/privileged-access-management/6167/ManageEngine_PAM360_64bit.exe).
2. The **InstallShield** wizard for PAM360 appears on the screen. Click **Next** to continue the installation.

   ![win-install-1](https://cdn.manageengine.com/sites/meweb/images/privileged-access-management/help/win-install-1.webp)

3. The Software **License Agreement** appears. Read the Agreement carefully. Click **Yes** to agree and proceed with the installation. Click **Back** to go back to the previous wizard. Click **No** to exit the setup. You can also **Print** the License Agreement for future reference.
4. Choose the folder to install PAM360 on your system. You can either go with the default location, **C:\Program Files\Manage Engine\PAM360** or click **Browse** to install PAM360 in a different location. Click **Next** to proceed with the installation. Click **Back** to go back to the previous wizard.

   ![win-install-2](https://cdn.manageengine.com/sites/meweb/images/privileged-access-management/help/win-install-2.webp)

5. The **Server Selection Panel** appears. Here, select the option relevant to the server you are setting up, e.g., **Read-Only Server**.

   1. **High Availability Primary Server** - The primary server will be your predominant server, which controls and manages PAM360's operations and services. It will always be fully functional, with all the features and functions provided by the PAM360 intact.
   2. **High Availability Secondary Server** - Select this option if you wish to install PAM360 in another instance - a secondary server. The secondary server will offer Read/Write access to users (except password reset) whenever the primary server is down and until it is brought back to service. The changes made in the database in the intervening period will be automatically synchronized with the primary server upon connection restoration.
   3. **Read-Only Server** - Select this option to configure PAM360 in multiple instances in your system environment. The Read-Only servers acts like mirror servers and synchronizes all the actions carried out by the primary server. In case of a primary server failure, any Read-Only server can be configured as the primary server.

      ![win-install-3](https://cdn.manageengine.com/sites/meweb/images/privileged-access-management/help/win-install-3.webp)

6. The **Registration for Technical Support** dialog box appears. Fill in the necessary details, such as **Name**, **E-mail Id**, **Phone**, **Company Name**, and **Country**. Click **Next** to proceed with the installation. Click **Skip** if you do not want to register. Click **Back** to go back to the previous wizard.
7. Now, the **Begin Installation** wizard appears that will require you to review your settings and begin the installation. Click **Back** to make any changes or click **Next** to proceed with the installation.
8. After the installation process, a wizard appears, indicating the completion of installation process. Choose to do any of the following by selecting the corresponding checkboxes:

   1. Select the **Yes, I want to view readme file** check box, to view the readme file.
   2. Select the **Start PAM360 Service** check box, to start the PAM360 service.
   3. Untick the boxes if you do not want to view the readme file or start the PAM360 service.

      ![win-install-4](https://cdn.manageengine.com/sites/meweb/images/privileged-access-management/help/win-install-4.webp)

9. Click **Finish** to complete with the installation process.

## 2. Installing PAM360 on Windows Core Server

1. Execute the command **powershell** to open Microsoft Powershell.
2. Execute the following command to download the PAM360 application build:

   ```powershell
   start-bitstransfer -source <full URL of the executable> -destination <full path to which you would like the executable to be downloaded>
   ```

   For example: *start-bitstransfer -source https://www.manageengine.com/privileged-access-management/6167/ManageEngine_PAM360_64bit.exe -destination C:\Users\Administrator*

3. Execute the following command to download the silent installation file:

   ```powershell
   start-bitstransfer -source <full URL of the executable> -destination <full path to which you would like the executable to be downloaded>
   ```

   For example: *start-bitstransfer -source https://www.manageengine.com/privileged-access-management/help/WindowsPrimaryNonMSP.zip -destination C:\Users\Administrator*

4. Execute the following command to extract the silent installation file:

   ```powershell
   Expand-Archive -LiteralPath <full path of the executable file> -DestinationPath<full path to which you would like the file to be extracted>
   ```

   For example: *Expand-Archive -LiteralPath C:\Users\Administrator\WindowsPrimaryNonMSP.zip -DestinationPathC:\Users\Administrator\WindowsPrimaryNonMSP*

5. Execute the following commands to install the Nano Text editor:

   ```powershell
   Set-ExecutionPolicy Bypass -Scope Process -Force; iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
   ```

   ```powershell
   choco install nano
   ```

6. Execute the following command to edit the extracted file, **WindowsPrimaryNonMSP.iss**:

   ```powershell
   nano WindowsPrimaryNonMSP.iss
   ```

7. Now, edit the **Name, MailId** (mandatory)**, Phone, Company, Country** (mandatory), and **Save** the file.
8. Next, execute the following command:

   ```powershell
   ManageEngine_PAM360_64bit.exe -a -s -f1"C:\Windows\WindowsPrimaryNonMSP.iss" -f2"C:\Windows\WindowsPrimaryNonMSP.log"
   ```

Upon executing the above commands, the PAM360 application will be installed successfully, and the service will start automatically.

## 3. Installing PAM360 on Linux

> **Caution**
>
> The PAM360 application needs to be installed on the Linux server with a non-root Linux account.

1. Download the file [ManageEngine_PAM360.bin](https://www.manageengine.com/privileged-access-management/6167/ManageEngine_PAM360_64bit.bin) for Linux.
2. Execute the command: **chmod a+x <file-name>** to assign the executable permission.
3. Execute the command: **./<file_name>**
4. Execute the command: **./<file_name> -i console**, if you are installing on a headless server.
5. The **InstallAnywhere** wizard for PAM360 appears on the screen with an introduction. Click **Next** to continue the installation.

   ![linux-install-1](https://cdn.manageengine.com/sites/meweb/images/privileged-access-management/help/linux-install-1.webp)

6. The PAM360 **License Agreement** appears. Read the Agreement carefully and click **I accept the terms of the License Agreement** to proceed with the installation. Click **Previous** to go back to the previous wizard. Click **Cancel** to exit the setup anywhere between the installation.
7. Choose the folder to install PAM360 on your system. You can either go with the default location, or click **Choose** to install PAM360 in a different location. You can also click **Restore Default Folder** to change from the given different location to the default location. Click **Next** to proceed with the installation. Click **Previous** to go back to the previous wizard.

   ![linux-install-2](https://cdn.manageengine.com/sites/meweb/images/privileged-access-management/help/linux-install-2.webp)

8. The **Server Selection Panel** appears. Here, select the option relevant to the server you are setting up, e.g., **Read-Only Server**.

   1. **High Availability Primary Server** - The primary server will be your predominant server, which controls and manages PAM360's operations and services. It will always be fully functional, with all the features and functions provided by the PAM360 intact.
   2. **High Availability Secondary Server** - Select this option if you wish to install PAM360 in another instance - a secondary server. The secondary server will offer Read/Write access to users (except password reset) whenever the primary server is down and until it is brought back to service. The changes made in the database in the intervening period will be automatically synchronized with the primary server upon connection restoration.
   3. **Read-Only Server** - Select this option to configure PAM360 in multiple instances in your system environment. The Read-Only servers acts like mirror servers and synchronizes all the actions carried out by the primary server. In case of a primary server failure, any Read-Only server can be configured as the primary server.

      ![linux-install-3](https://cdn.manageengine.com/sites/meweb/images/privileged-access-management/help/linux-install-3.webp)

9. Now, the **Pre-Installation Summary** wizard appears that will require you to review your settings and begin the installation. Click **Previous** to make any changes or click **Install** to proceed with the installation.
10. Now, the **InstallAnywhere** wizard begins with the **PAM360** installation process.
11. Now, a wizard appears, indicating the completion of installation process. Click **Done** to complete the installation.
12. Upon installation, log in as a root user and perform the following steps. This is to install the PAM360 as a startup service.

    1. Open the console and navigate to the **<PAM360-Installation-Directory>/bin** folder.
    2. Execute the command **sh pam360.sh install** (In Ubuntu, execute as **bash pam360.sh install**).

PAM360 has now been installed successfully.

### 3.1 Limitations of Installing PAM360 on Linux

When deploying PAM360 on a Linux system, distinct limitations should be considered:

- **Agent Requirement** - Installing an agent on Windows systems is necessary for managing passwords and conducting tasks such as remote password resets.
- **AD Authentication** - Linux installations do not support logging into PAM360 using Active Directory (AD) credentials.
- **Resource Discovery** - Standard discovery methods cannot be utilized to identify Windows resources and Remote Apps.

These constraints necessitate alternative configurations or additional considerations when implementing PAM360 in Linux environments.

## 4. Silent Installation

For information about silent installation of PAM360, click [here](https://www.manageengine.com/privileged-access-management/help/silent-install.html).

## 5. Transferring PAM360 Installation

If you need to move your PAM360 installation to a different machine or to a different location on the same machine, follow these steps:

1. **Backup and Precaution**: Do not remove the existing installation until the new one is confirmed to be working properly. This ensures you have a backup and can recover from any issues or data corruption during the transfer process.
2. **Backup Current Database**: Take a backup ([PostgreSQL](https://www.manageengine.com/privileged-access-management/help/db_backup.html) | [MS SQL](https://www.manageengine.com/privileged-access-management/help/db-backup-mssql.html)) of the current PAM360 database.
3. **Install on New Machine**: Install PAM360 on the new machine.
4. **Restore Backup Data**: Restore ([PostgreSQL](https://www.manageengine.com/privileged-access-management/help/disaster_recovery.html) | [MS SQL](https://www.manageengine.com/privileged-access-management/help/disaster-recovery-mssql.html)) the backup data to the new installation.

By following these steps, you can ensure a smooth and secure transition to your PAM360 installation.