Imprivata PAM Centralized Deployment Manager

Welcome to the Imprivata PAM Centralized Deployment Manager (CDM). This package contains Ansible playbooks and other resources to automate the deployment and configuration of a PAM farm.

PAM Deployment Process

It is assumed that PAM will be deployed to Linux VMs, not physical servers or Docker containers. The general approach is summarized in the following sections.

Part 1: Plan and Provision

• Step 1.1: Decide what VM roles your PAM deployment will need.
• Step 1.2: Provision Linux VMs as needed to fulfill these roles.
• Step 1.3: Setup each VM to be managed by Ansible.

Part 2: Ansible Controller Setup

• Step 2.1: Install PAM Centralized Deployment Manager.
• Step 2.2: Generate the Ansible inventory file.
• Step 2.3: Generate the Ansible vars file.
• Step 2.4: Generate the Ansible vault file.

Part 3: Deploy PAM

• Step 3.1: Run the ansible hello playbook to check connectivity to your PAM VMs.
• Step 3.2: Run the ansible install playbooks to install PAM components.
• Step 3.3: Login to the PAM management console and check the configuration.

Advanced Topics

• PAM Master Password
• PAM Upgrades
• PAM Python Tools
• PAM Certificates
• Remote Worker Integration
• Adding PAM Nodes to an Existing Farm