Fortipam domain crendentials on multiple servers

Hello Daniele,

I found this solution, can you tell us if it helps, please?

To configure a secret with domain credentials in FortiPAM and use it across multiple servers, you can follow these steps:

Step-by-Step Configuration

1. Create a Secret with Domain Credentials:

   • Navigate to Secrets > Secrets.
   • Click on Create to open the Select a Secret Template window.
   • In the Windows pane, select Windows Domain Account.
   • Fill in the necessary fields:
     • Name: Enter a name for the secret.
     • Target: Select the Windows AD server.
     • Associated Secret: Enable this option and select Smart Association from the dropdown.
     • Account Prefix: Enter "fortipam".
     • Fields:
       • Username: Enter the domain username.
       • Password: Enter and confirm the password.
   • Click Submit to create the secret.
     
     

2. Use the Secret in Other Windows/SSH Secrets:

   • For each server or target where you want to use the domain credentials:
     • Navigate to the Secrets section.
     • Select the appropriate secret template (e.g., Windows or SSH).
     • In the Target field, select the server or target.
     • Enable Associated Secret and choose the previously created domain credentials secret from your personal folder.
     • Complete any additional required fields specific to the server or target.
       
       

3. Share Secrets in the Public Folder:

   • Move or copy the secrets to the public folder to share them with other users.
   • Ensure that the permissions are set correctly so that other users can access and use the secrets.
     
     

Considerations

• Local Users in FortiPAM: Ensure that each user in FortiPAM is set up as a local user. This setup is necessary for managing individual domain credentials.
• Smart Associations: If you encounter difficulties with smart associations, verify that the associated secret is correctly linked and that the target servers are properly configured to accept the domain credentials.

Follow-ups and Clarification Questions

• Are there specific error messages or issues you encounter when using smart associations?
• Do you need guidance on setting permissions for shared secrets in the public folder?
• Would you like more detailed instructions on configuring local users in FortiPAM?

If you need further assistance, please provide additional details about the difficulties you're experiencing with smart associations.