A password consumer is the representation of an application, Windows service, or Windows scheduled task that you run on a SAM endpoint. Except for software development kit password consumers, all other password consumers get privileged account passwords but do not check out or check in the passwords.
SAM provides privileged account passwords to the following password consumers on demand:
Use a software development kit password consumer to replace hard-coded passwords in scripts.
Note: Unlike other password consumers, software development kit password consumers can check out and check in privileged account passwords.
Use a database password consumer to replace hard-coded passwords in programs that connect to a database.
Use a Windows Run As password consumer to let a user substitute to a privileged account and execute a command without the privileged account password.
Note: You must install CA ControlMinder on the SAM endpoint with the SAM Integration feature enabled to use password consumers that get passwords on demand.
SAM provides privileged account passwords to the following password consumers on password change:
Use a Windows Scheduled Task password consumer to set password policies and automate password changes for scheduled tasks.
Use a Windows Service password consumer to set password policies and automate password changes for Windows services. The service must be run by an account for which you can change the password, for example, your computer's Administrator account or a domain account.
Note: You do not need to install CA ControlMinder on the SAM endpoint to use password consumers that get passwords on password change.
Copyright © 2013 CA Technologies.
All rights reserved.
|
|