Install Devolutions Hub Services to enable PAM and encryption integration

The Devolutions Hub Services installer facilitates the installation and configuration of different features such as the Privileged Access Management module, the Encryption Service (SSO-enabled feature) and the Hub Reporting service. The installed service will establish communication between your Devolutions Hub Business and your internal resources.

Create an Application identity

  1. In Devolutions Hub, click on AdministrationApplication identities.

  2. Select Add application identity (+).

    Add a new application identity
    Add a new application identity
  3. Enter a name and click Add.

  4. Copy the Application secret and Application key, and paste them somewhere safe. Alternatively, you can download them as a PDF file. These will be needed during Devolutions Hub Services installation later on.

    Save the given Application secret and Application key
    Save the given Application secret and Application key

Edit permissions for application identities

  1. In Devolutions Hub, Click AdministrationSystem permissions.

  2. Click the Edit icon (+)..

    Edit system permissions
    Edit system permissions
  3. In the System tab, give both Manage privileged access tasks and Manage privileged access providers permissions to your application identity created during step 1. Click on Update.

    Add permissions to your application identity
    Add permissions to your application identity

You need to grant permission on the vault either at System level or Individual PAM vault level.

For all system vaults

  1. In Devolutions Hub, go to AdministrationConfiguration and securitySystem permissions.

  2. Click the Edit button.

    Edit system permissions
    Edit system permissions
  3. Select Vaults and choose your Application user in the drop-down menu under the Contributor section.

  4. Click Update to close the window.

For a specific PAM vault

  1. In Devolutions Hub, go to Administration – Management – Vaults

  2. Click the Add button (+).

    Add a new PAM vault
    Add a new PAM vault
  3. Select PAM vault in the menu to create your PAM vault.

    Choose a vault content type
    Choose a vault content type
  4. Go to the Security menu and select the Edit tab.

  5. Choose your Application user in the drop-down menu under the Contributor section.

    Add application user to Contributers
    Add application user to Contributers
  6. Click Add to close the window.

Installation of Devolutions Hub Services

  1. Download Devolutions Hub Services, and launch the installer.

  2. After reading and accepting the End-user license agreement, check PAM from the Custom setup feature list.

    Install the PAM feature
    Install the PAM feature
  3. Enter your Host URL, as well as the Application secret and Application key you saved at the end of step 1. You can then test your connection to see if everything is working properly. Click on Finish.

Check Devolutions Hub Services logs

Devolutions Hub Services' logs are available in Windows Event Viewer. The service should be able to connect to the created provider. The provider needs to be added in Devolutions Hub.

It is also possible to see the Devolutions Hub Services as a service in the Services window of Windows which shows the current status and where it can be started or stopped.

See also

Devolutions Forum logo Share your feedback