• Home
• Admin Docs
• Configure Database Policy
• Configure Password Policies
• Configure Password Rotation

Configure & Manage Password Rotation

---

Password rotation is a critical security practice that ensures privileged credentials remain protected by periodically changing them. This prevents unauthorized access and mitigates risks associated with compromised passwords.

miniOrange PAM simplifies this process by enabling administrators to automate password rotations based on predefined schedules or after each usage. This guide provides a step-by-step approach to setting up and managing password rotation policies effectively.

Managing Password Rotation

Follow these steps to add and manage Password Rotation effectively.

Accessing the Rotation Policies Section

• Open the miniOrange PAM dashboard.
• Navigate to the Policy section from the left-side menu.
• Select Password Rotation to open the configuration panel.

Configuring a New Password Rotation Policy:

• Click the + Add Policy button.
• A setup window will appear where you need to configure policy details.

Define General Settings:

• Policy Name: Assign a unique name for easy identification.
• Password Policy: Select the predefined password policy to apply.
• System User: Choose system accounts that require password rotation.

Choose a Rotation Type:

Select how and when passwords should be updated:

• Option 1: Scheduled Rotation
• Start Date & Time: Choose when the first password rotation should begin.
• Rotation Frequency: Define how often passwords should change:
• Every X Hours
• Every X Days
• Every X Months
• Option 2: Rotation After Every Use
• Forces password rotation immediately after each login.



• Once all configurations are set, click Add to activate the policy.

Understanding the Password Rotation Dashboard:

The dashboard provides a structured overview of all configured password rotation policies.

• Search Bar: Find policies quickly using keywords.
• Name: Displays the name of each configured password rotation policy.
• Password Policy: Shows which password policy is associated with the rotation settings.
• Rotation Type: Indicates whether the policy follows a scheduled or per-use rotation.
• Actions: You can easily edit or delete policies directly from the dashboard

• If you need to manage a password policy, you can do it from the main page.
• Locate Action >> select the required option from the dropdown.

Action	Option Overview
Edit	With the edit option, you are able to alter the details you have added in the configuration section.