# Basic Requirements for PAM360 Installation

This document provides guidelines for the recommended minimum hardware and software requirements to run PAM360 in your environment. You can use these baselines for your on-premises PAM360 installation. We have categorized the requirements based on the size of the organization where PAM360 is installed: Small, Medium, and Large.

## 1. Prerequisites

Besides the standard system requirements (both hardware and software) listed in the upcoming sections, the following elements are essential for the proper functioning of the PAM360 server if you are planning to utilize PAM360’s account discovery and password reset provisions:

1. An external **SMTP Mail Server** to support the functioning of the PAM360 server and to send notifications to users.
2. A **Service Account** that either has **Domain Admin Rights** or **Local Admin Rights** in the PAM360 server and in the target systems you would like to manage.
3. **Microsoft .NET framework**.
4. **Visual C++ Redistributable for Visual Studio 2015 and above** (for PAM360’s Account Discovery and Password Reset features).

## 2. Hardware Requirements

| Organization | Processor | RAM | Hard Disk |
|---|---|---|---|
| Small & Medium Businesses (<5,000 Privileged Accounts) | 4 Cores or More | 16 GB or More | 4 GB for the Application; 10 GB for the Database |
| Mid-Market Businesses (<20,000 Privileged Accounts) | 8 Cores or More | 16 GB or More | 4 GB for the Application; 10 GB for the Database |
| Enterprises (<50,000 Privileged Accounts) | 16 Cores or More | 24 GB or More | 5 GB for the Application; 50 GB for the Database |
| Large Enterprises (>50,000 Privileged Accounts) | 24 Cores or More | 32 GB or More | 8 GB for the Application; 100 GB for the Database |

**Additional Details**

The disk space required for session recordings varies depending on the number, duration, and type of sessions recorded. The approximate storage consumed by session recordings (excluding idle time) is as follows:

- **Website/Remote Connection:** 10 MB per minute of recording
- **Linux sessions:** 0.5 MB per minute of recording
- **RDP sessions:** 3 MB per minute of recording

Use these estimates to calculate the database requirements based on your organization's session recording usage.

**Caution**

If you have configured any High Availability model with an external database, the processor, RAM, and hard disk requirements for database remain the same as listed above for each environment size. However, for Application Scaling setups:

- With 2 nodes, ensure each node has a Quad Core processor or above and 16 GB RAM.
- With 4 nodes, ensure each node has an Octa Core processor or above and 32 GB RAM.

## 3. Software Requirements

| Operating Systems | Web Interface and Database |
|---|---|
| **Windows**: Windows Server 2025; Windows Server 2022; Windows Server 2019; Windows Server 2016. **Linux**: Ubuntu 18.04 and above; CentOS 6 and above; Red Hat Linux 9.0; Red Hat Enterprise Linux 5.x and above; AlmaLinux 9.x and above. **Note**: In general, PAM360 goes well with any flavor of Linux and can also be run on VMs of the above operating systems. | **Web Interface**: HTML client requires one of the following browsers** to be installed in the system: Microsoft Edge for Windows; Chrome, Firefox, and Safari for Windows, Linux and Mac. ** PAM360 is optimized for 1280 x 800 resolution and above. **Database Requirement**: PostgreSQL 14.17, bundled with the product; PAM360 also supports MS SQL Server 2016 and above; the SQL server should be installed in Windows Server 2016 and above. |

## 4. Ports Required by PAM360

The below table lists the set of all ports used by PAM360 for various functions.

| Port Name | Port Number | Protocol | Purpose | Direction |
|---|---|---|---|---|
| Web Client | 8282 | TCP | For PAM360 web application | Inbound |
| SMTP | 25 | TCP | For sending emails between mail servers | Outbound |
| SSH \| Telnet | 22 \| 23 | TCP | For Unix and network device management | Outbound |
| RDP | 3389 | TCP | For remote desktop connections to Windows devices | Outbound |
| WMI | 135, 139, 445 | TCP | For managing Windows services and devices | Outbound |
| LDAP, LDAPS | 389, 636 | TCP | For standard and secure directory communication | Outbound |
| REST API | 8282 | TCP | For application interactions through RESTful services | Inbound |
| SSH API | 6622 | TCP | For secure shell API interactions | Inbound |
| Session Gateway | 8283 | TCP | For remote desktop and SSH sessions through the web client or mobile application | Inbound |
| PostgreSQL \| MS SQL | 3456 \| 1433 | TCP | For database operations between servers | Outbound |
| Application Gateway | 8288, 8289 | TCP | For communication between the PAM360 Application Gateway and PAM360 | Outbound |
| Private CA-OCSP Respoder Server port | 8080 | TCP | OCSP responder endpoint for certificate status checking | Inbound |
| Oracle | 1521 | TCP | For Oracle Database Servers communication | Outbound |
| Sybase ASE | 5000 | TCP | For Sybase listener communication | Outbound |

## 5. Licensing

1. **Trial Version**: Instantly download and install the fully functional trial version, supporting up to **5 administrators**. Evaluate all features for 30 days.
2. **Free Version**: After 30 days of trial, the trial version will be automatically converted to free version. This perpetual free version allows for **1 administrator** and management of up to **10 resources**, with no expiration.
3. **Registered Version**: This version is licensed based on the number of administrators and keys, and offers advanced capabilities such as automated discovery of privileged accounts, integration with ticketing and SIEM systems, jump server configuration, application-to-application password management, built-in compliance reports, and support for SQL Server or clustered databases as the backend.

PAM360 supports seven distinct user roles:

1. Privileged Administrator
2. Administrator
3. Cloud Administrator
4. Password Administrator
5. Password Auditor
6. Password User
7. Connection User

The term **administrator** in the registered version encompasses Privileged Administrators, Administrators, Cloud Administrator, and Password Administrators. Licensing restricts the total number of these administrators. However, there is no limitation on the number of Password Users and Password Auditors. For more details on PAM360 user roles, click [here](https://www.manageengine.com/privileged-access-management/help/user_management.html).