Synchronize Target Account Passwords

Synchronization ensures that password updates that are made in the Credential Manager database are also made to passwords stored at the remote target system. When passwords are synchronized, the appliance pulls credentials from the Credential Manager database and then it sends the credentials to the target system. The target system then verifies whether the credentials are accurate.
capam32
Synchronization ensures that password updates that are made in the Credential Manager database are also made to passwords stored at the remote target system. When passwords are synchronized, the appliance pulls credentials from the Credential Manager database and then it sends the credentials to the target system. The target system then verifies whether the credentials are accurate.
Password synchronization needs an associated password composition policy. When Credential Manager generates a password, it meets the criteria of the composition policy.
You can synchronize passwords for individual accounts and for a group of target accounts. For compound account groups, synchronization updates a series of replicated databases with the same password and keeps the passwords that are synchronized with each other. 
You can configure password updates at the following times:
  • Immediately
  • After a password is viewed
  • When it attains a certain age
  • On a configured schedule
There is no limit to how many previous passwords 
Symantec PAM
 stores or to how long passwords are kept.
Enable Password Synchronization
When you add a target account or you update an existing account, you can enable password synchronization.
 
Follow these steps:
 
  1. In the UI, go to 
    Credentials, Manage Targets, Accounts
    .
  2. Select 
    Add
     or double-click an account in the Target Accounts list.
  3. Select the 
    Password
     tab.
  4. For the 
    Synchronized
     option, select the behavior that you want between the Credential Manager database and the target system:
    • Update only the Credential Manager Server. This option allows the 
      Symantec PAM
       and target system passwords to differ.
    • Update both the Credential Manager Server and the target system
    Synchronization is not available for accounts that use the Generic application type.
  5. In the 
    Owner User Name
     field, select the Credential Manager user 
  6. Select 
    OK
If a target account is a Windows Proxy account, Credential Manager directs the Windows Proxy to verify the password and update it.
To learn more about password synchronization, review the following topics: