Setting up Bitvise SSH client as a TCP/UDP PAM Service

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

PAM allows the inclusion of several applications as TCP/UDP Services to be invoked from within its environment and control the access to the devices through these applications.
This article explains how to add Bitvise SSH Client as a PAM service.

Environment

Release : 4.x

Resolution

Like PuTTY tool, Bitvise SSH Client can be invoked by PAM Client to access/SSH to target devices. We need to configure TCP/UDP Service in PAM to achieve this.
The TCP/UDP Service configuration steps are similar to how we configure it for PuTTY. Please refer the steps in below KB article

 Setting up PuTTY as a TCP/UDP PAM Service

The only differences are the following
1. Please install Bitvise SSH Client as the Administrator user on the PAM Client machine.

2. During configuring the TCP/UDP Service for the Bitvise SSH Client, e.g. "Bitvise SSH", set the "Client Application" field as following

bvssh -host=<Local IP> -port=<First Port> -user=<User> -pw=<Password> -openTerm=Always -loginOnStartup -autoLogout -exitOnLogout

3. From the Access page. when we launch the "Bitvise SSH" service the "Host Key Verification" dialog always appears. We cannot avoid this as this is Bitvise SSH Client security feature (see "Host Key Verification" section in https://www.bitvise.com/ssh-client-unattended document).

Please click [Accept for This Connection]