Credential Storage and Password Rotation

Excalibur manages credentials securely and supports automatic password rotation for PAM targets.

Vault

Excalibur does not maintain a dedicated internal vault system.

Password Rotation

Excalibur supports password rotation for PAM Targets via a privileged user account. This account changes target passwords according to a defined Password Rotation Policy, which includes settings for generating random passwords.

Credential Storage

All updated passwords for PAM Targets are stored encrypted at rest within the PAMTarget table.

Credential Visibility

Users cannot see the passwords for PAM Targets. Credentials are only decrypted at the start of a session and are used exclusively to initiate that session.