> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/pam/pam-with-devolutions-cloud/install-the-devolutions-cloud-services-to-enable-pam-and-encryption-integration.md).

# Install the Devolutions Cloud Services to enable PAM and encryption integration

The Devolutions Cloud Services installer facilitates the installation and configuration of different features such as the Privileged access management module, the [Encryption service (SSO-enabled feature)](https://docs.devolutions.net/cloud/web-interface/administration/configuration-security/authentication/encryption-service/) and the [Devolutions Cloud reporting service](https://docs.devolutions.net/cloud/web-interface/reports/scheduled-reports/). The installed service will establish communication between your Devolutions Cloud and your internal resources.

{% hint style="info" %}
Multiple instances of Devolutions Cloud Services can be run simultaneously for higher availability. Devolutions Cloud will simply use the one executed first and leave the others on standby. Should one fail, Devolutions Cloud will automatically use the next service in line.

A ***Friendly name*** can be attributed to each service during installation to help differentiate them.
{% endhint %}

### Create an Application identity

1. In Devolutions Cloud, click on ***Administration*** – ***Application identities***.
2. Select ***Add application identity (+)***.

   ![](https://cdnweb.devolutions.net/docs/HUBB6003_2024_1.png)
3. Enter a name and click ***Add***.
4. Copy the ***Application secret*** and ***Application key***, and paste them somewhere safe. Alternatively, you can download them as a PDF file. These will be needed during Devolutions Cloud Services installation later on.

   ![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub6043.png)

### Edit permissions for application identities

1. In Devolutions Cloud, Click ***Administration*** – ***System permissions***.
2. Click the ***Edit*** icon (***+***).
3. In the ***System*** tab, give the ***Manage privileged access tasks***, ***Manage privileged access providers***, ***Manage system configuration***, and ***Manage scheduled reports*** permissions to your application identity created during step 1. Click on ***Update***.

   <div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>You need to grant permission on the vault either at <em><strong>System level</strong></em> or <em><strong>Individual PAM vault level</strong></em>.</p></div>

#### For all system vaults

1. In Devolutions Cloud, go to ***Administration*** – ***Configuration and security*** – ***System permissions***.
2. Click the ***Edit*** button.
3. Select ***Vaults*** and choose your ***Application user*** in the drop-down menu under the ***Contributor*** section.
4. Click ***Update*** to close the window.

#### For a specific PAM vault

1. In Devolutions Cloud, go to ***Administration – Management – Vaults***
2. Click the ***Add*** button (***+***).
3. Select ***PAM vault*** in the menu to create your PAM vault.

   ![](https://cdnweb.devolutions.net/docs/HUBB6015_2025_1.png)
4. Go to the ***Security*** menu and select the ***Edit*** tab.
5. Choose your ***Application user*** in the drop-down menu under the ***Contributor*** section.

   ![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub6056.png)
6. Click ***Add*** to close the window.

### Installation of Devolutions Cloud Services

1. [Download Devolutions Cloud Services](https://devolutions.net/download-center/#hub), and launch the installer.
2. After reading and accepting the ***End-user license agreement***, check ***PAM*** from the ***Custom setup*** feature list.
3. Enter your ***Host*** URL, as well as the ***Application secret*** and ***Application key*** you saved at the end of step 1. You can then test your connection to see if everything is working properly. Click on ***Finish***.

### Create an application service

To create an application service, go to ***Administration***, then select ***Application services*** under ***Configuration and security***.

Click on the ***Add (+)*** button and select ***PAM service***. Some information is needed, such as an ***Application service*** ***name***, a ***Description***, and the ***Application identity***.

![](https://cdnweb.devolutions.net/docs/HUBB6019_2025_3.png)

### Check Devolutions Cloud Services logs

Devolutions Cloud Services' logs are available in ***Windows Event Viewer***. The service should be able to connect to the created provider. The provider needs to be added in Devolutions Cloud.

It is also possible to see the Devolutions Cloud Services as a service in the Services window of Windows which shows the current status and where it can be started or stopped.

### See also

* [Application services](https://docs.devolutions.net/cloud/web-interface/administration/configuration-security/application-services/)
* [Manage application identities](https://docs.devolutions.net/cloud/web-interface/administration/management/application-users/manage-application-users/)
* [Quickly deploy AD PAM in your environment](https://docs.devolutions.net/pam/kb/how-to-articles/quickly_deploy_ad_pam_in_your_environment/)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/pam/pam-with-devolutions-cloud/install-the-devolutions-cloud-services-to-enable-pam-and-encryption-integration.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.