CA PAM (Privileged Access Manager) Vault

Click here and we'll walk you thru the steps. Add IP addresses to scan, configure scanner appliances, configure vaults and authentication records, set up option profiles and start scanning!

These credentials may be defined for your CA PAM vault.

URL  The HTTP or HTTPS URL to access the CA PAM Vault HTTP API.

SSL Verify  Qualys scanners will verify the SSL certificate of the web server to make sure the certificate is valid and trusted, unless you clear (un-check) the SSL Verify option. You may want to clear this option to skip SSL verification if the certificate was not issued by a well-known certification authority (CA) or if the certificate is self-signed.

APIKey Name  The user account that can call the CA PAM Vault HTTP API.

API Key  The password for the user account that can call the CA PAM Vault HTTP API.

Choose the CA PAM vault in your authentication record and provide these details.

Vault Device Type  The type of device for which password is stored. Select Device Name or Device Host.

Vault Device Name  Enter the device name defined in the vault configuration. You can use one or more variables in order to match several targets that use the same naming convention.

${ip} // The IP address of the target, i.e. 10.20.30.40.

${ip_dash} // The IP address of the target with dashes instead of dots, i.e. 10-20-30-40.

${dnshost} // The DNS host name of the target, i.e. host.domain.

${host} // The host name of the target, i.e. host before .domain.

${nbhost} // (Windows only) The NetBIOS host name of the target in upper-case, i.e. HOST_ABC.

Vault Device Host  Enter the host name defined in the vault configuration. You can use one or more variables in order to match several targets that use the same naming convention.

${ip} // The IP address of the target, i.e. 10.20.30.40.

${ip_dash} // The IP address of the target with dashes instead of dots, i.e. 10-20-30-40.

${dnshost} // The DNS host name of the target, i.e. host.domain.

${host} // The host name of the target, i.e. host before .domain.

${nbhost} // (Windows only) The NetBIOS host name of the target in upper-case, i.e. HOST_ABC.

Vault App Name  Application name as defined in the vault configuration for accessing a specific device.