Osirium PAM Administrator Course

Module 1

Osirium Privileged Access Management Solution (PAM) Overview

• What is Osirium PAM?
• High Level Architecture Overview
• Port Requirements
• Components
• Product Versioning
• Release Streams
• Osirium PAM Prerequisites
• Supported Infrastructure Platforms
• Software and Downloads
• Documentation and Articles

‍

Module 2

PAM Server Installation and Configuration

• PAM Server
• Master Encryption Key (MEK)
• PAM Server Default Accounts
• PAM Server Installation
• PAM Server Deployment in VMware vSphere
• PAM Server Deployment in Microsoft Azure
• Connecting to the PAM Server VM
• PAM Server Setup and Configuration

DEMO 1: Installing the PAM Server

LAB 1: Deploy and configure the PAM Server

‍

Module 3

MAP Server

• MAP Server
• High Level Architecture Overview
• What is a MAP Server?
• MAP Server as a Domain Member

‍

Module 4

PAM Interfaces

• What are the Interfaces?
• What is the UI?
• Accessing the UI
• UI Navigation
• What is the Admin Interface?
• Accessing the Admin Interface
• Admin Interface Navigation
• Approval Requests
• UI logon issues
• Product Licensing
• Uploading Certificates

‍

Module 5

Upgrading the PAM Server

• What is an Upgrade Kit?
• PAM Server Upgrade Paths
• PAM Server Upgrade Process
• PAM Server Upgrade Issues

LAB 2: Licensing and Upgrading the PAM Server

‍

Module 6

PAM Users and User Groups

• User Authentication
• RADIUS Authentication
• Active Directory Authentication
• MFA TOTP Authentication
• MFA TOTP Authentication Enrolment
• PAM User Creation Options
• Creating User Groups
• Roles

LAB 3: Creating PAM Users and User Groups

‍

Module 7

PAM Server in Detail

• Osirium Support Account
• PAM Server Console window
• System Queue
• Logs
• Log Event Levels
• Log Overview
• Techout Information
• Techout and Custom Techout
• Managing Disk Space

‍

Module 8

SAML Authenticaion

• What is a SAML Identity Provider (IdP)?
• Using SAML with Osirium PAM
• PAM SAML SP Initiated SSO Flow
• Configuring SAML IdP with Osirium PAM
• SAML Authentication
• SAML Configuration Process for Azure

LAB 4: Configure SAML Authentication

‍

Module 9

PAM Use of Accounts

• User in, Account out
• Account States
• Changing Account States
• Accounts Mapping Model
• Control Accounts
• Meta-columns

‍

Module 10

Managing Devices

• How PAM interacts with Devices
• Device Templates
• Device States
• Account Sources
• Bulk Importing Devices
• Device Detail page

LAB 5: Provisioning Devices

‍

Module 11

Managing Profiles

• What is a Profile?
• Access Levels
• Approval Requests
• Change Ticket Configuration
• Session Recording
• Configuring a Profile: Operating Models
• Profile Detail Page
• Accessing a Device

LAB 6: Creating and Configuring Profiles

‍

Module 12

Using MAP Server to Access Applications

• What is a MAP Server?
• MAP Shared Secret
• Installing the MAP Server
• Installing the MAP Server Using the Command Line
• MAP Server Service
• MAP Server Log Files & AutoIT
• MAP Server Groups
• Adding a MAP Server
• Provision the Thick Client Application
• Universal Web SSO
• Configuring a Profile for a MAP Server Tool
• Accessing a MAP Tool
• MAP Server Upgrade Process

LAB 7: Install and configure MAP Server

‍

Module 13

PAM Resilience

Architectural

• Hypervisor Level Resilience
• PAM Mesh DR

Backups

• Virtual Machine Level Backup
• Backup to Fileshare
• Backup/Restore

‍

Module 14

Session Recording

• Session Recording Features
• Configuring Session Recording
• Device Access Report

LAB 8: Session Recording and Change Tickets

‍

Module 15

Osirium Automation

• Beyond Osirium PAM
• What is Osirium Automation?
• Example applications of Osirium Automation
• Osirium Automation Architecture
• PPA Dashboard
• PPA Tasks
• PPA Activity Log