The Indeed PAM SSH Proxy component is installed on a dedicated server, and installation on an access server is also possible.

Go to the directory C:\Program Files\Indeed PAM\SSH Proxy\SshProxy and edit the file Pam.SshProxy.Service.exe.config: 

<pamProxy ... />:

  • Port - TCP port for incoming SSH connections
  • ApiUrl - is the URL of Indeed PAM Core
  • IdpUrl - is the URL of Indeed PAM IdP

  • SshProxySecret - Secret for client keys for additional component authentication

    The secret is generated by the console utility Pam.ConsoleApp.exe


    <pamProxy Port="22" ApiUrl="https://pam.domain.local/pam/core" IdpUrl="https://pam.domain.local/pam/idp" SshProxySecret="sL3EwbV91dJnEhcw75Dl0xkamylQMMAjBj0dQF6xWqfQZ+Dgu06JgkQJH+anWABthQzQyBdtWk8s6oNuvgEpRA==" />


After editing the SSH Proxy configuration file, restart the PAM.SshProxy.Service service

C:\>powershell -command "Restart-Service PAM.SshProxy.Service -Force"