实施 Delinea Secret Server 特权访问管理方案，涵盖密钥保管库配置、基于角色的访问策略、自动密码轮换、会话录制以及 Active Directory/云集成。当需要集中管理特权凭证、用以取代电子表格化的密钥管理方式、实现密码自动轮换，或满足 PAM 合规要求（SOX、PCI-DSS、HIPAA、NIST 800-53）时使用本技能。
Service accounts and shared credentials are stored in spreadsheets or plaintext files
Need to implement automated password rotation for privileged accounts
Require session recording and keystroke logging for privileged user activity
Migrating from manual PAM processes to an enterprise vault solution
Do not use for standard end-user password management; Delinea Secret Server is designed for privileged and shared account credential management requiring enterprise-grade controls.
Prerequisites
Delinea Secret Server license (On-Premises or Cloud)
Windows Server 2019/2022 for on-premises deployment with IIS and SQL Server
Active Directory service account with read permissions for discovery
SSL/TLS certificate for web interface encryption
Network connectivity to target systems for password rotation
PowerShell 5.1+ for automation scripts
Workflow
Step 1: Deploy Secret Server Infrastructure
Install and…
以下为摘要预览，完整内容请查看 GitHub 原文。
Implementing Delinea Secret Server for PAM
When to Use
Organization needs centralized privileged credential management across hybrid infrastructure
Service accounts and shared credentials are stored in spreadsheets or plaintext files
Need to implement automated password rotation for privileged accounts
Require session recording and keystroke logging for privileged user activity
Migrating from manual PAM processes to an enterprise vault solution
Do not use for standard end-user password management; Delinea Secret Server is designed for privileged and shared account credential management requiring enterprise-grade controls.
Prerequisites
Delinea Secret Server license (On-Premises or Cloud)
Windows Server 2019/2022 for on-premises deployment with IIS and SQL Server
Active Directory service account with read permissions for discovery
SSL/TLS certificate for web interface encryption
Network connectivity to target systems for password rotation
