Administration Guide

Introduction
- FortiPAM concepts
- Organization of the guide
- Using the GUI
  - Banner
  - Tables
- Modes of operation
- FortiPAM deployment options
- Feature availability
FortiPAM installation
- Installing FortiClient with the FortiPAM feature
- FortiPAM appliance setup
- FortiPAM with TPM
- Connecting to target remote systems
Licensing
- License expiry and renewal
- Renewing FortiPAM-VM license
Dashboard
- Adding a custom dashboard
- System information widget
- Licenses widget
  - FortiGuard Distribution Network
- VM license
Secrets
- Secret list
- Personal/public folder
  - Creating a folder
- My requests list
  - Make a request
- Approval list
  - Approve a request
  - Reviewing multiple requests
- Job list
  - Creating a job
Secret settings
- Templates
  - Creating secret templates
- Launchers
  - Creating a launcher
    - Example secret configurations with launchers example
- Policies
  - Creating a policy
    - Applying a policy to a folder
- Addresses
  - Creating an address
  - Creating an address group
- Approval flow
  - Approval profile
    - Enabling approval profiles for a secret
    - Create an approval profile
- Password changers
  - Creating a password changer
    - Automatic password changing
    - Automatic password verification
- Password policies
  - Creating a password policy
    - Applying a password policy to a secret template
- Character sets
  - Creating a character set
- AntiVirus
  - Creating an antivirus profile
    - Enabling antivirus scan in a secret
- Data loss prevention (DLP) protection for secrets
  - Supported file types
- DLP file pattern
- SSH filter profiles
  - Creating an SSH filter
    - Adding SSH filter to secret
    - Example SSH filter profiles example
- Integrity check
  - Creating a client software entry for integrity check
User management
- User definition
  - Creating a user
- User groups
- Role
  - Access control options
- LDAP servers
- SAML Single Sign-On (SSO)
- RADIUS servers
- Schedule
- FortiTokens
Monitoring
- User monitor
- Active sessions
Log & report
- Secret
- Events
- ZTNA
- SSH
- Antivirus
- Date leak prevention
- Reports
- Log settings
- Email alert settings
  - Email alert when the glass breaking mode is activated example
- Debug settings
- Automation trigger settings
Network
- Interfaces
  - Creating an interface
  - Creating a zone
- Static routes
  - Creating an IPv4 static route
- DNS settings
- Security fabric
  - Fabric Connectors
    - FortiAnalyzer logging
- Packet capture
  - Creating a packet capture filter
System
- Settings
  - Testing the email service connection example
- ZTNA
- High availability
- Certificates
- SNMP
- Backup
  - Sending backup file to a server Example
- Firmware
- FortiPAM license
- FortiGuard license
- Disclaimers via the CLI
Troubleshooting
- Troubleshoot using trace files
  - Example troubleshooting example
- FortiPAM HTTP filter
Appendix A: Installation on KVM
Appendix B: Installation on VMware
Appendix C: Installing vTPM package on KVM and adding vTPM to FortiPAM-VM
Appendix D: vTPM for FortiPAM on VMware
Appendix E: Enabling soft RAID on KVM or VMware
Appendix F: Installation on Hyper-V
Appendix G: Installation on Azure
Appendix H: FortiPAM hardware RAID CLI commands
Change Log

Home FortiPAM 1.1.2 Administration Guide

1.1.2

Secret list

Secret List in Secrets displays a list of configured secrets.

To access any of the secrets, you require Secret List access.

No matter what permissions the secrets are provided, the secrets are not available anymore if the access control for Secret List in the Role page is set to None. See Role.

For each secret the following columns are displayed:

Name
Target Address
Last Password Change
Last Password Verification
Folder
Template
Auto Password Changing

The Last Password Verification column gives an overview of the secret password status.

Use the sorting arrows next to the column names to sort columns in an ascending or descending order, e.g.:

Clicking the upper arrow in the Name column arranges the secret entries in an ascending order.

The Secrets List tab contains the following options:

Create

Select to create a new secret. See Creating a secret.

Upload

Select and then select Upload Secret to upload secrets using the secret upload template file, or download the secret upload template by selecting Download Template.

See Uploading secrets using the secret upload template.

Edit

Select to edit the selected secret.

When a secret request is approved, the Launcher Status timer shows the remaining time till you (as a requester) have access to the secret when you double-click to open the secret in Secrets > Secret List.

When editing a secret, click Discard Changes to discard all the changes you made.

Move

Select to move the selected secret.

Delete

Select to delete the selected secrets.

Clone

Select to clone the selected secret.

Add favorite

Select to add the selected secret to the favorite folder.

Remove favorite

Select to remove the selected secret from the favorite folder.

Launch Secret

Launch the selected secret. See Launching a secret.

Make Request

Make request to launch or perform a job on the secret. Make a request.

Search

Enter a search term in the search field, then hit Enter to search the secrets list. To narrow down your search, see Column filter.

The following column filters are available:

Name
Target Address
Last Password Change
Last Password Verification
Folder
Template
Auto Password Changing
ID

Not all options are available for a secret. The options depend on how the secret has been set up, e.g., The Make Request option is only available when the secret has Requires Approval to Launch Secret enabled.