Internet Explorer Browser Extensions
To make password management and auto logon activities seamless, PAM360 provides the option to securely synchronize passwords across browsers through native browser extensions. The extension helps you to auto-fill passwords to websites and web applications and also launch RDP and SSH sessions. In addition, the extension allows you to view all passwords, resource groups, favorites, recently used and a search option.
Once you deploy the extension, you will be able to perform most of the password management operations directly from the browser extension, while PAM360 will be running in the background.
Step-1: To begin using the IE extension, first download the Setup Wizard from this link. Once it is downloaded, run the Setup.exe and follow the instructions as given in the wizard.
Step 2: After installation is complete, open an IE browser and enable the Command bar. To enable it, right-click on Tab bar (empty area near tabs) and select Command bar. Now, PAM360 add-on should be visible in the Command bar.
Step 3: Next, click on the Tools (Alt+X) icon present on top right corner, and select Internet Options. Go to Security tab, select Trusted Sites, and add PAM360's URL (https://<PAM360-Access-URL>:port).
Step 4: Now, in the Internet Options window itself, click on Advanced tab. Search for "Allow active content to run in files on My Computer" under Security section and enable the option. Then, click Apply.
Step 5: Restart the computer for the above settings to take effect.
Step 6:If you already have a valid SSL certificate for PAM360 web server, this step can be skipped. Or else, log in to PAM360 web console from IE and accept the certificate warning.
Step 7:Now, open the add-on and supply the credentials.
What operations can you do using browser extensions?
You can automatically log in to websites and applications from the browser itself without even going to PAM360's GUI. Click on any resource shown in the ‘All Passwords’ tab to view the account names associated with that resource and again click on any one of the account to view the password. You will see icons for auto logon and copy username/password operations.You can view the account description by clicking again on the password.
1. View passwords
You can view the list of all passwords by clicking on the "All Passwords" tab in the browser extension. Alternatively you can also view passwords specific to resource group by clicking on the tab "Resource Groups". Here, the browser extension will maintain the same tree structure of resource groups and accounts associated with those groups as shown in the PAM360 web interface. You can easily view the password of any account associated with that particular resource group from the "Resource Groups" tab.
2. Search passwords
You can search passwords directly from the browser extension based on several criteria such as resource name, user name, DNS name, user account, resource type, resource description, department, location, domain name, all resources or additional custom fields.
3. To automatically login / launch RDP or SSH sessions
You can launch a direct connection to websites and Windows/Linux resources by clicking the auto logon icon. Select "Open URL in browser" option for websites and applications and "RDP/SSH" for IT resources.
This option provides quick access to the list of all your frequently used passwords that were marked as favorites by you. This option helps you to easily locate your favorite resource and its password, without scrolling through the entire list every single time. You can mark any password as favorite from "All Passwords" screen by selecting the star icon.
5. Recently used
Click on the "Recently Used" tab in the browser extension to find the list of recently accessed passwords.
6. Copy username / password
You can copy username or password for pasting them at some other place as required.
7. Password access request / release
If you have configured access control workflow in your web console for an extra level of security, the browser extension will also prompt users to raise access requests and a comment or ticket id to access passwords. The administrators can either grant or deny approvals to user access requests as and when required.
Note: The access control mechanism in the browser extension works intact as configured in the web-console.
Clear clipboard - You can choose how long the data should remain in the clipboard after you close the app. You can choose your clipboard clearing time ranging from 10 to 120 seconds. There is also an option never to clear the clipboard.
Automatically logout after - You can choose how long the session should remain logged in. You can choose from 15 minutes to 24 hours. There is no option to keep the browser extension logged in for more than 24 hours.
Note: If you have enabled the "Ticketing System Integration" / "Reason for retrieving the passwords" setting in your web console, the browser extension will also prompt you to enter the "ticket-id" / "Reason for retrieval" whenever you access the password.