▸

Osirium PAM Administrator Course

overview

Learn how to install, configure and upgrade the components of Osirium PAM. Learn how to access and logon via the PAM user interface and discover the power of the Admin Interface. Effectively create and manage users and devices and learn how to promote the least privileged model when assigning access through profiles. Review the options available for Osirium PAM resilience and learn how to investigate and troubleshoot common issues.

Duration

2 consecutive days

Next course dates

Available on request

Course delivery

Virtual, Instructor-led (includes hands-on labs).

Audience

This course has been targeted at System Administrators, System Engineer and DevOps who will be responsible for managing the day to day running of Osirium PAM components and providing users with privileged access to devices.

Prerequisites

Knowledge of devices
Basic network knowledge
Knowledge of privileged account management

Pricing

Available upon request.

Course modules

Module 1

Osirium Privileged Access Management Solution (PAM) Overview

What is PAM?
High Level Architecture Overview
Port Requirements
Components
Product Versioning
Release Streams
Osirium PAM Prerequisites
Supported Infrastructure Platforms
Software and Downloads
Documentation and Articles

‍

Module 2

PAM Server Installation and Configuration

PAM Server
Master Encryption Key
PAM Server Default Accounts
PAM Server Installation
PAM Server Deployment in VMware vSphere
PAM Server Deployment in Microsoft Azure
Connecting to the PAM Server VM
PAM Server Setup and Configuration

DEMO 1: Installing the PAM Server

LAB 1: Deploy and configure the PAM Server

‍

Module 3

MAP Server

MAP Server
High Level Architecture Overview
What is a MAP Server?
MAP Server as a Domain Member

‍

Module 4

PAM Interfaces

What are the Interfaces?
What is the UI?
Accessing the UI
UI Navigation
What is the Admin Interface?
Accessing the Admin Interface
Admin Interface Navigation
Approval Requests
UI Logon Issues
Product Licensing
Uploading Certificates

‍

Module 5

Upgrading the PAM Server

What is an Upgrade Kit?
PAM Server Upgrade Paths
PAM Server Upgrade Process
PAM Server Upgrade Issues

LAB 2: Licensing and Upgrading the PAM Server

‍

Module 6

PAM Server in Detail

Osirium Support Account
PAM Server Console window
System Queue
Logs
Log Event Levels
Log Overview
Techout Information
Techout and Custom Techout
Managing Disk Space

‍

Module 7

PAM Users and User Groups

User Authentication
RADIUS Authentication
Active Directory Authentication
MFA TOTP Authentication
MFA TOTP Authentication Enrolment
SAML Authentication
PAM User Creation Options
Creating User Groups
Roles

LAB 3: Creating PAM Users and User Groups

LAB 4: Configure SAML Authentication

‍

Module 8

PAM Use of Accounts

User in, Account out
Account States
Changing Account States
Accounts Mapping Model
Control Accounts
Meta-columns

‍

Module 9

Managing Devices

How PAM interacts with Devices
Device Templates
Device States
Account Sources
Bulk Importing Devices
Device Detail page

LAB 5: Provisioning Devices

‍

Module 10

Managing Profiles

What is a Profile?
Access Levels
Approval Requests
Change Ticket Configuration
Session Recording
Configuring a Profile: Operating Models
Profile Detail Page
Accessing a Device

LAB 6: Creating and Configuring Profiles

LAB 7: Session Recording and Change Tickets

Module 11

Using MAP Server to Access Applications

What is a MAP Server?
MAP Shared Secret
Installing the MAP Server
Installing the MAP Server Using the Command Line
MAP Server Service
MAP Server Log Files & AutoIT
MAP Server Groups
Adding a MAP Server
Provision the Thick Client Application
Universal Web SSO
Configuring a Profile for a MAP Server Tool
Accessing a MAP Tool
MAP Server Upgrade Process