# Syteca

> Syteca documentation - User Activity Monitoring and Privileged Access Management in a single platform.

## Docs

- [What Is Syteca?](https://syteca.com/docs/get-started/what-is-syteca.md): Syteca is an Inside Security Platform that secures what happens inside your trusted environment.
- [System Architecture](https://syteca.com/docs/get-started/system-architecture.md): The main software components that make up Syteca, how they interact, and how large-scale deployments extend the basic architecture.
- [System Requirements](https://syteca.com/docs/get-started/system-requirements.md): Syteca hardware, software, and network requirements — deployment sizing for PoC / Small / Medium / Large workloads, supported Client operating systems, port table, and per-Client performance numbers (CPU, bandwidth, storage).
- [Full Deployment Checklist](https://syteca.com/docs/get-started/full-deployment-checklist.md): A single, linear checklist from bare virtual machine to configured Client agents — hand this to a customer or partner so their team can prepare a deployment before the technical call.
- [Management Tool Basics](https://syteca.com/docs/get-started/management-tool-basics.md): Open and sign in to the Syteca Management Tool, learn the interface and navigation, set up two-factor authentication, and change your own password.
- [Getting Started with a SaaS Deployment](https://syteca.com/docs/get-started/saas-deployment.md): First-time setup for Syteca SaaS — log in, mandatory password change, mandatory 2FA, view the serial key, and install Windows / macOS / Linux Clients on the endpoints to be monitored.
- [Getting Started Checklist](https://syteca.com/docs/get-started/checklist.md): The post-install task sequence for a fresh Syteca deployment — licenses, Client groups, users, monitoring configuration, PAM, USB rules, alerts, reports, dashboards, database, and Multi-Tenant mode.
- [Getting Started with Password Management](https://syteca.com/docs/get-started/password-management.md): Sequence and prerequisites for setting up Syteca Privileged Access Management — Web Connection Manager (launch locally or in browser), Desktop Connection Manager on a jump server, secret types, and the third-party apps required.
- [Server Requirements](https://syteca.com/docs/get-started/requirements/application-server.md): Hardware, OS, database, and storage requirements for Syteca Application and Management Tool Servers. Covers PoC through large deployments of up to 10,000 concurrent sessions.
- [Client Requirements](https://syteca.com/docs/get-started/requirements/clients.md): Supported operating systems and hardware requirements for Syteca clients on Windows, macOS, Linux desktop, Linux server, Solaris, and AIX endpoints.
- [Client Performance and Data Volume](https://syteca.com/docs/get-started/requirements/client-performance.md): CPU, bandwidth, and storage figures for Syteca client sessions. Average and peak values for Windows and Linux clients at default full HD recording settings.
- [Network Port Requirements](https://syteca.com/docs/get-started/requirements/network-ports.md): Firewall ports required for Syteca to function. Covers ports for client-to-server data, Management Tool access, remote client install, and database connections.
- [Session Monitoring](https://syteca.com/docs/session-monitoring/overview.md): Record, review, and investigate user activity across Windows, macOS, and Linux endpoints — screen captures, keystrokes, clipboard, file transfers, and full audit trails.
- [User Activity Recording Parameters](https://syteca.com/docs/session-monitoring/recording/user-activity-recording.md): Configure when and how Syteca records user activity on Client computers - Full-Motion Capture vs Interval Capture modes, event-triggered recording, frame rates, alert-only recording windows, and bit depth.
- [Recording Indicators (Tray Icon and On-Screen Icon)](https://syteca.com/docs/session-monitoring/recording/recording-indicators.md): Two Windows Client parameters that show users when they're being monitored — the Client tray icon in the system tray, and the on-screen Recording Is In Progress overlay icon.
- [Clipboard Monitoring](https://syteca.com/docs/session-monitoring/recording/clipboard-monitoring.md): Monitor Copy, Cut, and Paste operations performed on Client computers - capture clipboard text alongside screen recordings, and trigger alerts on specific clipboard content patterns.
- [Keystroke Logging Parameter](https://syteca.com/docs/session-monitoring/recording/keystroke-logging.md): Enable keystroke logging on Windows and macOS Clients, including keyword-triggered recording and searchable keystroke metadata.
- [File Monitoring](https://syteca.com/docs/session-monitoring/recording/file-monitoring.md): Monitor File Upload operations performed by users on Client computers. Capture upload events in the File Monitoring tab and trigger alerts on specific file-upload patterns.
- [URL Monitoring Parameter](https://syteca.com/docs/session-monitoring/recording/url-monitoring.md): Record the browser addresses visited on Windows and macOS Clients, alongside screen captures, to see which websites users have visited.
- [SWIFT Username Monitoring](https://syteca.com/docs/session-monitoring/recording/swift-username-monitoring.md): Monitor users logged in to the SWIFT financial network from Syteca-monitored endpoints - for SWIFT Customer Security Programme (CSP) compliance and audit trails on SWIFT access.
- [Filtering Parameters](https://syteca.com/docs/session-monitoring/recording/filtering.md): Reduce the volume of monitored data by filtering Client activity by application, keystroke context, time window, remote IP address, or user.
- [Idle Event Detection](https://syteca.com/docs/session-monitoring/recording/idle-detection.md): Two parameters that together control when Syteca registers idle events — Register IDLE event when user is inactive (timeout-based), and Detect System IDLE events (sleep/hibernation/screen-off). Both work together to define the system's idle behavior.
- [Bandwidth Usage Reduction Parameters](https://syteca.com/docs/session-monitoring/recording/bandwidth-usage-reduction.md): Reduce the volume of data a Windows Client sends to the Application Server by throttling screen captures, batching transmissions, and tuning compression.
- [Reports](https://syteca.com/docs/session-monitoring/reports/overview.md): Syteca reports turn recorded user activity into evidence — 28+ report types covering productivity, alerts, USB events, sessions, and audits, scheduled or ad-hoc.
- [Generate Ad-Hoc Reports](https://syteca.com/docs/session-monitoring/reports/ad-hoc-reports.md): Generate one-time Syteca reports for any time period using the Report Generator — pick a report type, set filters, and download the result in PDF, Excel, CSV, or other formats.
- [Scheduled Reports](https://syteca.com/docs/session-monitoring/reports/scheduled-reports.md): Configure Syteca scheduled report rules to generate and email reports automatically — daily, weekly, or monthly — and run any rule manually at any time.
- [User Activity Dashboards](https://syteca.com/docs/session-monitoring/dashboards/user-activity-dashboards.md): Generate and view administrator dashboards of endpoint user activity in Syteca — application use, website use, idle vs active time, alerts, and live sessions.
- [The Sessions List](https://syteca.com/docs/session-monitoring/sessions-list.md): Find any recorded session quickly: filter, search keystrokes and clipboard text, sort, and bulk-act on Syteca Client sessions from the Activity Monitoring page.
- [File Upload Monitoring](https://syteca.com/docs/session-monitoring/file-upload-monitoring.md): Syteca File Upload Monitoring: detect when users upload files to web services, cloud drives, or external destinations from Windows and macOS Clients - log path, filename, extension, and destination URL.
- [Archived Sessions](https://syteca.com/docs/session-monitoring/archived-sessions.md): Play back archived Syteca sessions long after they've been deleted from the live database — connect to and manage archived databases from the Activity Monitoring page.
- [Filtering Client Sessions](https://syteca.com/docs/session-monitoring/filtering-client-sessions.md): Narrow the Client Sessions list by specific criteria like user, Client, or time period, or search directly within session content.
- [The Session Viewer](https://syteca.com/docs/session-monitoring/player/overview.md): Syteca Session Viewer: play back recorded user sessions with synchronized screen captures, metadata, keystrokes, and clipboard — Interval Capture or smooth Full Motion Capture video, including live sessions in real time.
- [The Metadata Grid](https://syteca.com/docs/session-monitoring/player/metadata-grid.md): The Metadata grid pane in the Syteca Session Viewer — column reference per OS, search/filter/sort inside a session, and Synced vs Filtered playback modes.
- [Per-OS Playback Details](https://syteca.com/docs/session-monitoring/player/per-os-playback.md): What's specific to playing Syteca Client sessions for each operating system — Windows clipboard/USB/URL/idle/secrets data, macOS clipboard, and Linux SSH/X-forwarded/GUI sessions.
- [Forensic Export](https://syteca.com/docs/session-monitoring/forensic-export.md): Syteca Forensic Export: produce evidence-grade exports of recorded sessions, with SHA256 integrity verification, password protection, and a standalone Forensic Player for third-party playback.
- [Sensitive Data Masking](https://syteca.com/docs/session-monitoring/masking/sensitive-data.md): Syteca Sensitive Data Masking: detect and mask passwords, SSNs, credit card numbers, and custom regex patterns in recorded sessions on Windows - at the endpoint, in real time.
- [Pseudonymizer](https://syteca.com/docs/session-monitoring/masking/pseudonymizer.md): Syteca Pseudonymizer: GDPR-compliant employee monitoring that hides the identity of monitored users by default, with a controlled Investigator/Supervisor approval workflow for de-anonymization.
- [User Behavior Analysis (UEBA)](https://syteca.com/docs/session-monitoring/ueba/overview.md): Syteca UEBA: detect insider threats by building per-user behavior baselines and flagging sessions with anomalies — endpoint-native, no separate SIEM required.
- [Alerts](https://syteca.com/docs/session-monitoring/alerts.md): Syteca alerts: real-time and batched detection of forbidden user activity — across Windows, macOS, and Linux Clients — with email, tray, on-screen warning, automatic blocking, or process kill response actions.
- [Alert Rules](https://syteca.com/docs/session-monitoring/alert-rules.md): Reference for Syteca alert rule construction — parameters, comparison operators, logical operators, regex syntax, and worked examples for common detection patterns.
- [Default Alerts](https://syteca.com/docs/session-monitoring/default-alerts.md): Catalog of the alerts that ship preconfigured with Syteca — covering fraudulent activity, data leakage, potentially illicit activity, and non-work-related activity across Windows and Linux Clients.
- [The Alerts Events Tab](https://syteca.com/docs/session-monitoring/alerts-events.md): Review and triage every alert event in Syteca from one place — the Alerts tab on the Activity Monitoring page, with status workflow, notes, and bulk triage.
- [Block Users](https://syteca.com/docs/session-monitoring/block-on-alert.md): Syteca lets you block users on Windows Clients — manually while viewing their session, or automatically when an alert triggers — with a configurable forced-logout window, custom warning message, and central Blocked Users list.
- [USB Device Monitoring & Blocking](https://syteca.com/docs/session-monitoring/usb-devices/overview.md): Syteca USB Device Control: detect, audit, and block removable media on Windows and macOS endpoints, with administrator approval workflow for one-off access.
- [USB Monitoring Rules](https://syteca.com/docs/session-monitoring/usb-devices/usb-rules.md): Add, edit, and delete USB monitoring rules in Syteca, define exceptions for individual devices by Hardware ID or VID/PID, and find a device's Hardware ID.
- [USB Access Approval](https://syteca.com/docs/session-monitoring/usb-devices/usb-access-approval.md): Set up the request-and-approve workflow for blocked USB devices in Syteca, and see what happens on the user's side when they try to use one.
- [Privileged Access Management](https://syteca.com/docs/pam/overview.md): Syteca PAM: vault privileged credentials, broker access without exposing passwords, rotate automatically, and record privileged sessions for audit and compliance.
- [Web Connection Manager](https://syteca.com/docs/pam/access/web-connection-manager.md): Agentless PAM from Syteca. Launch privileged sessions to Windows, Linux, and Active Directory accounts directly from the browser — no client install on the user's machine.
- [Syteca PAM Connection Manager for Linux](https://syteca.com/docs/pam/access/linux-pacm.md): Use the pacm command-line tool to list, inspect, and connect to Secrets directly from a Linux SSH or terminal session — no desktop GUI required.
- [Desktop Connection Manager](https://syteca.com/docs/pam/access/desktop-connection-manager.md): Syteca's PAM jump server / gateway. Broker recorded privileged sessions to Windows, Linux, Active Directory, MS SQL, and web accounts through a Windows Client.
- [Manage Access Requests](https://syteca.com/docs/pam/access/access-requests.md): Approve or deny user access requests in Syteca from one place — endpoint logins, one-time passwords, secret usage, USB device access, and de-anonymization.
- [Account Discovery](https://syteca.com/docs/pam/discovery/overview.md): Syteca Account Discovery: scan your network for privileged Active Directory, Windows, and Linux accounts, then onboard them into managed secrets — credentials unknown.
- [Configure WMI and PowerShell for Computer Discovery](https://syteca.com/docs/pam/discovery/wmi-powershell.md): Configure and troubleshoot the WMI and PowerShell scanners Syteca uses for Computer Discovery, to maximize the Windows local privileged accounts found.
- [Configure SSH Connections for Linux Discovery](https://syteca.com/docs/pam/discovery/ssh-linux-scanning.md): Configure and troubleshoot SSH connections so Syteca can discover and onboard Linux accounts during Linux Discovery scans, using passwords or public SSH keys.
- [Service Account Dependency Discovery and Onboarding](https://syteca.com/docs/pam/discovery/service-account-dependencies.md): Discover Windows services, scheduled tasks, and IIS application pools running under Active Directory or local Windows accounts, and keep them running through password rotation.
- [Set Up Password Management](https://syteca.com/docs/pam/secrets/configure-password-management.md): The configuration order to enable Syteca Password Management: license serial key, LDAP targets, PAM seat licenses, a Connection Manager, and your first secrets.
- [Add a Secret](https://syteca.com/docs/pam/secrets/add-secret.md): Create and configure a secret in Syteca to securely manage and broker access to a privileged account, with rotation, checkout, and access controls.
- [Permissions for Secrets](https://syteca.com/docs/pam/secrets/permissions.md): Understand Owner, Editor, and PAM User roles plus the File Transfer, View Password, and Copy Password advanced permissions for Syteca secrets and folders.
- [View and Manage Secrets and Folders](https://syteca.com/docs/pam/secrets/view-manage-secrets.md): Work with the redesigned Syteca Password Management page: the left-side menu, Tags, the secrets grid, bulk actions, filtering, and exporting.
- [Connect Using a Secret](https://syteca.com/docs/pam/secrets/use-secrets.md): Connect to a privileged account with a Syteca secret in the Desktop or Web Connection Manager, across Active Directory, Windows, Unix, Web, and MS SQL accounts.
- [View and Copy a Secret's Password](https://syteca.com/docs/pam/secrets/view-copy-password.md): Grant View Password and Copy Password permissions on a Syteca secret, then securely view or copy the password in Connection Manager or the Management Tool.
- [Password Checkout](https://syteca.com/docs/pam/secrets/password-checkout.md): Use Password Checkout in Syteca so only one user can use a secret at a time, with optional password rotation on check-in and forced check-in by an Owner.
- [Remote Password and SSH Key Rotation](https://syteca.com/docs/pam/secrets/remote-password-rotation.md): Automatically rotate the password or SSH key of a privileged account in Syteca on a schedule or on demand. Includes Windows and Unix SSH preconditions.
- [Heartbeat Checking](https://syteca.com/docs/pam/secrets/heartbeat.md): Periodically verify that a secret's stored password is still valid on the target system, without changing it — catch drift before it blocks access or rotation.
- [Transfer Files with WinSCP](https://syteca.com/docs/pam/secrets/file-transfer.md): Transfer files between the Connection Manager computer and a remote host through a Syteca secret using the WinSCP application, over SCP, SFTP, or FTP.
- [Workforce Password Management](https://syteca.com/docs/pam/secrets/workforce-password-management.md): Syteca Workforce Password Management (WPM): give every employee a private password vault for personal work credentials, inside the same platform that secures privileged access.
- [Edit a Secret](https://syteca.com/docs/pam/secrets/edit-secret.md): Edit an existing secret in Syteca: the redesigned Edit Secret panel, its Details tab, launching a secret, and the options available only when editing.
- [Delete a Secret](https://syteca.com/docs/pam/secrets/delete-secret.md): Delete one or more secrets in Syteca from the Password Management page using the Bulk Action menu, with a confirmation step before removal.
- [Endpoint Security Posture Management (ESPM)](https://syteca.com/docs/espm/overview.md): Continuously monitor endpoint security posture, identify risks and compliance gaps, and improve organizational security through automated assessments, health scoring, and remediation guidance.
- [Getting started](https://syteca.com/docs/espm/get-started.md): Deploy, license, and configure Endpoint Security Posture Management (ESPM) to begin monitoring endpoint security posture, identifying risks, and improving compliance across your organization.
- [Glossary](https://syteca.com/docs/espm/glossary.md): Learn the key terms and concepts used throughout the ESPM, including policies, risk factors, controls, health scores, and compliance assessments.
- [About policies](https://syteca.com/docs/espm/about-policies.md): Explore security and compliance policies, understand how risk factors, controls, and severity ratings contribute to policy health scores, and monitor endpoint compliance across the organization.
- [About risk factors and probes](https://syteca.com/docs/espm/about-risk-factors.md): Understand how risk factors and probes are evaluated on endpoints, how risk scores are calculated, and how risk status changes throughout the remediation lifecycle.
- [About health score](https://syteca.com/docs/espm/endpoint-security-posture-and-health-score.md): Understand how endpoint, policy, and control health scores are calculated from detected risks and how endpoint telemetry contributes to overall security posture assessments.
- [Policies page](https://syteca.com/docs/espm/policies/viewing-policies.md): Explore security and compliance policies, review their health and assigned endpoints, and analyze the controls and risk factors used to evaluate endpoint security posture.
- [Policy details](https://syteca.com/docs/espm/policies/policy-details.md): Analyze a policy's implementation and impact by reviewing its risk factors, assigned endpoints, and endpoint groups, and manage where the policy is deployed across your environment.
- [Managing policies](https://syteca.com/docs/espm/policies/managing-policies.md): Assign and unassign policies for endpoints and endpoint groups to control which risk factors are evaluated during endpoint health assessments.
- [SOC 2 compliance policy](https://syteca.com/docs/espm/policies/soc2.md): Assess endpoint and system configurations against automatable SOC 2 security, availability, confidentiality, and access-control requirements to support ongoing compliance monitoring and risk reduction.
- [Syteca AI Usage policy](https://syteca.com/docs/espm/policies/ai-usage-policy.md): Monitor and govern employee use of AI tools across browsers, extensions, applications, and development environments to support secure, compliant, and responsible AI adoption.
- [Syteca Endpoint Geolocation policy](https://syteca.com/docs/espm/policies/endpoint-geolocation.md): Monitor endpoint geographic location to identify access from approved, high-risk, or prohibited regions and support compliance with security, privacy, and regulatory requirements.
- [Syteca ESPM baseline policy](https://syteca.com/docs/espm/policies/espm-baseline.md): Assess endpoint security posture through a baseline set of security, data protection, network, account management, and monitoring controls designed to identify common operational and cybersecurity risks.
- [Risk factors page](https://syteca.com/docs/espm/riskfactors/risk-factors-page.md): Explore all risk factors defined across system policies to understand their usage, detection history, associated controls, and impact on managed endpoints.
- [Risk factor details](https://syteca.com/docs/espm/riskfactors/risk-factors-details.md): View detailed information about a risk factor, including its detection history, affected endpoints, associated policies and controls, remediation guidance, and recommendations.
- [Remediation and recommendations](https://syteca.com/docs/espm/riskfactors/recommend-and-remedy.md): View detailed remediation instructions and security recommendations for each risk factor to help resolve identified issues and reduce future risk.
- [Endpoints page](https://syteca.com/docs/espm/endpoints/endpoints-page.md): View the security health, risk exposure, and detailed configuration of an individual endpoint, including health trends, active risk factors, policy impacts, and key endpoint information.
- [Endpoint details](https://syteca.com/docs/espm/endpoints/endpoint-details.md): View the security health, risk exposure, and detailed configuration of an individual endpoint, including health trends, active risk factors, policy impacts, and key endpoint information.
- [Endpoint history](https://syteca.com/docs/espm/endpoints/endpoint-history.md): Monitor the history of endpoint health, policy assignments, and risk factor status changes to understand how an endpoint's security posture evolves over time.
- [Dashboard](https://syteca.com/docs/espm/dashboards-page.md): Monitor your endpoint security posture through widgets that highlight overall health, endpoint group health, active risk factors, policy check results, and the most critical endpoints.
- [Logs and troubleshooting](https://syteca.com/docs/espm/administration/logs.md): Access endpoint, server, and portal logs to investigate issues, analyze system behavior, and troubleshoot ESPM-related problems.
- [Syteca secret rotation](https://syteca.com/docs/espm/administration/keys.md): Rotate the shared secret used to establish a trusted connection between the Syteca and ESPM, ensuring uninterrupted communication and secure authentication between them.
- [How to identify high-risk endpoints](https://syteca.com/docs/espm/howto/how-to-check-critical-endpoints.md): Identify endpoints with critical health scores, review the risk factors contributing to their condition, and access remediation guidance to improve endpoint and overall system security posture.
- [How to assess and improve policy compliance](https://syteca.com/docs/espm/howto/how-to-check-and-improve-policy-compliance.md): Review policy compliance across your environment, identify non-compliant endpoints and risk factors, and remediate issues to improve policy health and overall security posture.
- [How to analyse endpoint health trends](https://syteca.com/docs/espm/howto/how-to-change-endpoint-health.md): Review historical endpoint health trends, policy assignment changes, and risk factor activity to understand how an endpoint's security posture has evolved over time.
- [How to investigate risk factors](https://syteca.com/docs/espm/howto/how-to-understand-risk-root-cause.md): Investigate risk factors affecting an endpoint, review available technical details, and understand the underlying conditions or activities that caused a risk to be detected.
- [How to prevent risk recurrence](https://syteca.com/docs/espm/howto/how-to-avoid-risk-re-appearing.md): Learn how to prevent remediated risks from reoccurring by implementing recommended configurations, security controls, and user awareness practices.
- [How to investigate and remediate event-based risks](https://syteca.com/docs/espm/howto/how-to-remediate-event-based-risk-factors.md): Investigate event-based risk factors, identify the activities or events that triggered them, and implement corrective actions to eliminate their root cause and reduce the likelihood of recurrence.
- [How to assess SOC 2 compliance readiness](https://syteca.com/docs/espm/howto/how-to-verify-that-the-system-is-soc-2-compliant.md): Use the SOC 2 Compliance Policy to assess automatable SOC 2 controls, identify non-compliant endpoints, and remediate detected risks to improve overall compliance readiness.
- [How to manage and mitigate AI-related risks](https://syteca.com/docs/espm/howto/how-to-eliminate-ai-related-risk-factors.md): Monitor AI-related activities across endpoints, investigate detected AI usage, and implement appropriate technical, administrative, or user-awareness controls to reduce AI-related risks.
- [How to benchmark organizational security posture](https://syteca.com/docs/espm/howto/how-to-benchmark-security-posture.md): Use dashboard widgets to compare security posture across endpoint groups, identify organizational security trends, and prioritize remediation efforts based on health scores, active risks, and policy compliance.
- [Administration](https://syteca.com/docs/administration/overview.md): Deploy, scale, secure, and operate Syteca — installation, databases, users and permissions, Client configuration, licensing, Multi-Tenant mode, and system health.
- [Syteca Architecture](https://syteca.com/docs/administration/deployment/architecture.md): The Syteca deployment architecture — Application Server, Management Tool, Clients (Windows / macOS / Linux), Master Panel, and SDK — with the basic deployment scheme and large-scale-deployment patterns for HA, multi-tenant, and global organizations.
- [Comparison of Standard and High Availability Modes](https://syteca.com/docs/administration/deployment/standard-vs-ha-modes.md): The operational differences between a single-Application-Server deployment and High Availability mode with multiple Application Servers in a failover cluster.
- [Installation Checklist](https://syteca.com/docs/administration/deployment/installation-checklist.md): The 10-step deployment sequence for installing Syteca on-premises: IIS setup on the Management Tool host, Application Server install, Management Tool install, serial key activation, multi-tenant setup, and Client installation for Windows, macOS, and Linux.
- [Install the Application Server](https://syteca.com/docs/administration/deployment/install-application-server.md): Step-by-step installation of the Syteca Application Server on Windows — Setup wizard walkthrough, database selection (PostgreSQL / MS SQL Server), Master Certificate generation, Windows Firewall configuration, cloud deployment notes, and external/cloud-based AS setup.
- [The Syteca Server Tray Application](https://syteca.com/docs/administration/deployment/server-tray-application.md): Start, stop, and monitor the Application Server, and access the Database Parameters tool, from the Windows notification area.
- [Application Server Advanced Settings](https://syteca.com/docs/administration/deployment/server-advanced-settings.md): Advanced Syteca Application Server configuration — change the Client connection port, allow a non-admin user to start the EkranServer service, enable SWIFT username monitoring, and display a Warning and Consent banner on Management Tool login.
- [Management Tool Prerequisites](https://syteca.com/docs/administration/deployment/management-tool-prerequisites.md): Prepare a Windows computer to install the Syteca Management Tool — enable IIS, install .NET Framework, configure IIS roles, set up an SSL certificate, and bind HTTPS.
- [Install the Management Tool](https://syteca.com/docs/administration/deployment/install-management-tool.md): Install, configure for remote access, update, and uninstall the Syteca Management Tool on a Windows computer — the single procedure end-to-end.
- [Install the Syteca Tray Notifications Application](https://syteca.com/docs/administration/deployment/tray-notifications.md): Install the standalone Syteca Tray Notifications application on a Windows endpoint. Note that this application is deprecated from Syteca 7.23 onward and is not included in current installation packages.
- [Update the Application Server](https://syteca.com/docs/administration/deployment/update-application-server.md): Upgrade the Syteca Application Server to a newer version — Setup wizard's Update path, database update vs reinstall, .NET 8.0 prereqs, and SMBv2 update warning.
- [Update Syteca](https://syteca.com/docs/administration/deployment/update-syteca.md): Best-practice procedure for updating an on-premises Syteca deployment — pre-update backup, Isolation Mode, .NET prereqs, data migration, and Client update strategy.
- [Uninstall the Application Server](https://syteca.com/docs/administration/deployment/uninstall-application-server.md): Uninstall the Syteca Application Server from a Windows host — pre-uninstall Client cleanup, the Setup wizard's Uninstall path, and the irreversible database deletion option.
- [Migrate the Application Server to Another Computer](https://syteca.com/docs/administration/deployment/migrate-application-server.md): Move Syteca Application Server to a new computer while keeping the existing database, and update Client connection settings if the address changes.
- [High Availability, Load Balancing, and Disaster Recovery](https://syteca.com/docs/administration/deployment/high-availability.md): Scale Syteca beyond a single Application Server — High Availability mode using Microsoft Failover Clustering, automatic load balancing across nodes, and disaster recovery via Storage Replica.
- [Configure Golden Image Mode](https://syteca.com/docs/administration/deployment/golden-image-mode.md): Prepare a Syteca Client golden image and enable Golden Image mode on the Application Server so cloned virtual machines don't create duplicate Client entries.
- [VDI Monitoring](https://syteca.com/docs/administration/deployment/vdi-monitoring.md): Monitor user activity across virtual desktop infrastructure — VMware Horizon, Microsoft Hyper-V, Citrix, Microsoft AVD / Windows 365, Amazon WorkSpaces, AppStream — using Syteca Clients on master images and floating endpoint licensing.
- [Install the Syteca Master Panel](https://syteca.com/docs/administration/deployment/master-panel.md): Install the Syteca Master Panel, a component that aggregates Client sessions from every Application Server across your organization into a single interface for centralized session review.
- [Install Additional Application Servers for Load Balancing](https://syteca.com/docs/administration/deployment/load-balancing-installation.md): Install additional Syteca Application Server instances alongside an existing deployment to distribute Client load across a cluster in High Availability mode.
- [Shared Storage High Availability](https://syteca.com/docs/administration/deployment/shared-storage-ha.md): Deploy shared storage in High Availability mode for Syteca screen captures using Microsoft Failover Clustering and Storage Replica. Recommended for medium and large deployments.
- [Deploy Syteca on Azure Cloud from Azure Marketplace](https://syteca.com/docs/administration/deployment/azure-marketplace.md): Deploy Syteca on Azure Cloud using the Azure Marketplace listing. An end-to-end automated deployment that provisions Application Server, SQL database, and network configuration in a single wizard.
- [Database Management](https://syteca.com/docs/administration/deployment/database-management.md): Manage the Syteca database over its lifetime. Configure Archive and Cleanup operations, clean up sessions left behind by deleted Clients, and tune PostgreSQL autovacuuming to keep the database healthy under sustained write load.
- [MS SQL vs PostgreSQL for Syteca](https://syteca.com/docs/administration/database/compare-databases.md): Compare MS SQL Server and PostgreSQL for Syteca Application Server. Covers licensing, scalability, performance, and security to help you choose the right database.
- [Edit the Database Parameters](https://syteca.com/docs/administration/database/database-parameters.md): Change the Application Server's database type, authentication method, encryption, and binary data storage location after installation.
- [Creating Databases Manually](https://syteca.com/docs/administration/database/creating-databases-manually.md): Pre-create the Syteca databases and a limited-privilege database user by hand, for MS SQL Server or PostgreSQL, before installing the Application Server.
- [Set Up a Remote PostgreSQL Server](https://syteca.com/docs/administration/database/postgresql-remote.md): Install PostgreSQL on a remote server and configure it for Syteca Application Server. Covers postgresql.conf, pg_hba.conf, and opening port 5432 on both machines.
- [Moving the MS SQL Database](https://syteca.com/docs/administration/database/moving-ms-sql-database.md): Relocate the MS SQL Server database to another drive on the same computer, or migrate it to a new computer entirely, including databases signed with a certificate.
- [Moving the PostgreSQL Database](https://syteca.com/docs/administration/database/moving-postgresql-database.md): Relocate the PostgreSQL database to another drive using tablespaces, or migrate the entire PGDATA directory to a new computer.
- [MS SQL Database Maintenance: Index Rebuilding](https://syteca.com/docs/administration/database/ms-sql-index-maintenance.md): Check index fragmentation and set up a recurring SQL Server Maintenance Plan to rebuild or reorganize indexes for better database performance.
- [Using a gMSA or sMSA Account for the MS SQL Server Connection](https://syteca.com/docs/administration/database/gmsa-account.md): Set up a Group or Standalone Managed Service Account for the connection between MS SQL Server and the Application Server, instead of a standard SQL login.
- [Configure Windows Authentication for Use with NTLM](https://syteca.com/docs/administration/database/windows-authentication-ntlm.md): Prevent authentication errors when Windows Authentication uses the NTLM security protocol to connect to an MS SQL Server database with NTLM restrictions in place.
- [Users and User Groups](https://syteca.com/docs/administration/users/users.md): Syteca user management: three user types (internal, Active Directory, application account), four default user groups, custom groups, per-Client permission scoping, two-factor authentication, and admin hardening.
- [Administrative Permissions](https://syteca.com/docs/administration/users/administrative-permissions.md): Reference for Syteca's seven administrative permissions — what each one grants, prerequisites, and the actions it unlocks on the Users page, Configuration, dashboards, and reports.
- [Client Permissions](https://syteca.com/docs/administration/users/client-permissions.md): Reference for Syteca's six per-Client permissions — what each grants, OS scope, and a worked example showing how user-level and group-level permissions combine.
- [The Clients Page](https://syteca.com/docs/administration/clients/overview.md): The Syteca Clients page: a single grid showing every Windows, macOS, and Linux Client in the deployment — with status, version, license, Last Activity, Client Groups, and inheritance state.
- [Windows Client Installation Prerequisites](https://syteca.com/docs/administration/clients/windows-install-prerequisites.md): Verify the prerequisites on a Windows target computer before remotely installing the Syteca Client. Covers the required Windows system services: Server and Remote Procedure Call (RPC).
- [Windows Client Installation Package Parameters](https://syteca.com/docs/administration/clients/windows-installation-package-parameters.md): Every configuration parameter available in the Windows Client .ini installation package, for defining Client behavior before deployment.
- [Windows Clients](https://syteca.com/docs/administration/clients/windows.md): Syteca's Windows endpoint agent: record local, remote, and concurrent Windows sessions, capture screen and keystrokes, and stream events to the Application Server.
- [Install Windows Clients](https://syteca.com/docs/administration/clients/install-windows.md): Install the Syteca Windows Client using any of seven supported methods: remote installation via the Management Tool, remote via PsExec, Group Policy MSI deployment, third-party deployment tools, local install with a custom installation package, local install without an INI file, or Amazon WorkSpaces…
- [Deploy the Windows Client Using Microsoft Intune](https://syteca.com/docs/administration/clients/windows-intune-deployment.md): Package the Syteca Windows Client as a Win32 app and deploy it remotely to devices enrolled in Microsoft Intune.
- [Editing the Windows Client Configuration](https://syteca.com/docs/administration/clients/windows-client-configuration.md): A tab-by-tab map of the Editing Client page for Windows Clients, linking each tab to the detailed parameter page that covers it.
- [macOS Clients](https://syteca.com/docs/administration/clients/macos.md): Syteca's macOS endpoint agent: record user sessions on Macs with multiple-display capture, manage native macOS permissions, and stream events to the Application Server.
- [macOS Hidden Client](https://syteca.com/docs/administration/clients/macos-hidden.md): Stealth-mode macOS Client for monitoring without visible indicators - alternative to the standard macOS Client when users shouldn't know monitoring is active.
- [Install macOS Clients](https://syteca.com/docs/administration/clients/install-macos.md): Install the Syteca macOS Client locally from the command line using the SytecaMacOSClientuniversal.tar.gz installation package. Covers standard and hidden Client variants, Multi-Tenant tenant keys, and the Accessibility and Screen Recording permission grants required for correct Client operation.
- [Linux Clients](https://syteca.com/docs/administration/clients/linux.md): How Syteca Linux Clients monitor SSH and terminal sessions, optionally X Window System GUI sessions, and how to fix Rescue mode and post-update status.
- [Install Linux Clients](https://syteca.com/docs/administration/clients/install-linux.md): Install the Syteca Linux Client locally from the command line using the SytecaLinuxClient.tar.gz installation package. Supports default monitoring parameters, custom monitoring via an INI file, and SELinux-enabled endpoints with automatic variant selection.
- [Client Groups](https://syteca.com/docs/administration/clients/client-groups.md): Manage Syteca Clients in bulk using Client groups — bulk-assign user permissions, inherit configuration settings, clone, and manage memberships from either the Client or the Client group side.
- [Update Clients](https://syteca.com/docs/administration/clients/update-clients.md): Update Syteca Windows, macOS, and Linux Clients automatically when the Application Server upgrades, or manually from the Management Tool with Bulk Action.
- [Uninstall Clients](https://syteca.com/docs/administration/clients/uninstall.md): Uninstall Syteca Clients remotely from the Management Tool or locally on the endpoint — for Windows, macOS, and Linux. Includes the shared Uninstallation key, single and bulk remote uninstall, and per-OS local uninstall commands.
- [Delete Clients](https://syteca.com/docs/administration/clients/delete-clients.md): Permanently remove an offline or uninstalled Client and all its recorded sessions from the database, individually or in bulk.
- [Offline Cache Size Parameter](https://syteca.com/docs/administration/clients/parameters/offline-cache-size.md): Configure how much local disk space a Syteca Client can use to cache monitoring data while disconnected from the Application Server.
- [Endpoint Access Control](https://syteca.com/docs/administration/access/endpoint-access-control.md): Require administrator approval before users log in to Windows and Linux Client computers in Syteca - always, or only outside defined work hours.
- [Smart Card Access](https://syteca.com/docs/administration/access/smart-card-access.md): Syteca smart card authentication: enforce PIV / CAC / domain-certificate sign-in to the Management Tool, so only users holding the physical card can administer the platform.
- [Two-Factor Authentication](https://syteca.com/docs/administration/access/two-factor-authentication.md): Require a TOTP second factor for logging in to Syteca Windows and Linux Client computers, using Google or Microsoft Authenticator. Includes Mass 2FA setup.
- [System Settings](https://syteca.com/docs/administration/configuration/system-settings.md): Configure Multi-Tenant mode, session timeouts, concurrent login rules, access request expiration, and logging levels on the System Settings tab.
- [Email Sending Settings](https://syteca.com/docs/administration/configuration/email-sending-settings.md): Configure the SMTP server, credentials, and recipient rules Syteca uses to send alert, USB monitoring, report, and health monitoring email notifications.
- [Customization Settings](https://syteca.com/docs/administration/configuration/customization-settings.md): Customize the Client notification logo, recording-in-progress icon, report branding, email subjects, blocked-user message, and 2FA login instructions.
- [Date & Time Format Settings](https://syteca.com/docs/administration/configuration/date-time-format.md): Set the date and time format used in the Management Tool and by Application Server features like Forensic Export, alert emails, and reports.
- [Export Storage Settings](https://syteca.com/docs/administration/configuration/export-storage-settings.md): Set default storage locations for Forensic Export results and generated reports, particularly for High Availability deployments.
- [Database Management Settings](https://syteca.com/docs/administration/configuration/database-management-settings.md): View database connection details and access Archive & Cleanup, Test Database Connection, Shrink Transaction Log, and Update Statistics from the Configuration page.
- [Account Discovery Settings](https://syteca.com/docs/administration/configuration/account-discovery-settings.md): Configure the reconciliation account, dependency failure notifications, and the WMI, PowerShell, and Linux SSH scanners used by Account Discovery — all from the Management Tool.
- [Endpoint Description](https://syteca.com/docs/administration/clients/parameters/client-description.md): Set a free-form description on a Syteca Endpoint to make it easier to find specific Endpointss when filtering by description as well as by name.
- [Update Client Automatically](https://syteca.com/docs/administration/clients/parameters/update-client-automatically.md): Enable Syteca Clients to update themselves automatically whenever they connect to an Application Server running a newer Syteca version - versus requiring manual bulk updates from the Management Tool.
- [Disconnected Client Detection](https://syteca.com/docs/administration/clients/parameters/disconnected-client-detection.md): Receive email notifications when a Syteca Client has been offline for longer than a specified period — for catching agent uninstalls, network outages, and disabled monitoring early.
- [Auto-Cleanup Parameters](https://syteca.com/docs/administration/clients/parameters/auto-cleanup.md): Configure scheduled or one-time cleanup of Endpoint-collected monitoring data — delete from the database, or archive to secure storage first and then delete. Apply per Endpoint or per Endpoint group.
- [Protected Mode](https://syteca.com/docs/administration/clients/parameters/protected-mode.md): Run the Syteca Windows Client in Protected mode - kernel-driver-enforced anti-tamper protection preventing users from editing Client data, settings, log files, or binaries even with local administrator rights.
- [Syteca PAM Connection Manager (Jump Server Mode)](https://syteca.com/docs/administration/clients/parameters/pam-connection-manager.md): Enable the Syteca Desktop Connection Manager on a Windows Client computer - turns the Client into a jump server for credential-less access to remote accounts using Syteca account secrets.
- [Windows Event Log Integration](https://syteca.com/docs/administration/clients/parameters/windows-event-log-integration.md): Forward Syteca Windows Client log messages - errors, warnings, informational events - to the Windows Event Log for centralized log collection by SIEM agents or log management tools.
- [Custom Path for the Client Installation Folder](https://syteca.com/docs/administration/clients/parameters/custom-installation-path.md): Define a custom installation folder for the Syteca Windows Client - useful for endpoints with non-default Program Files paths, deployment via GPO with standardized install locations, or compliance scenarios requiring agents on specific volumes.
- [One-Time Passwords](https://syteca.com/docs/administration/clients/parameters/one-time-passwords.md): Require a Windows Client login to be approved with a one-time password, either through an Approver or sent automatically to trusted users.
- [Secondary User Authentication](https://syteca.com/docs/administration/clients/parameters/secondary-user-authentication.md): Identify individual users on shared Windows or Linux accounts by requiring secondary login credentials before Syteca starts recording their activity.
- [Display an Additional Message on Login](https://syteca.com/docs/administration/clients/parameters/additional-login-message.md): Show users a custom message, consent prompt, or comment/ticket-number requirement before they can access a Windows or Linux Client.
- [Linux Client Parameters](https://syteca.com/docs/administration/clients/parameters/linux-client-parameters.md): Reduce database space used by Linux Client sessions by limiting or skipping command output and function calls, and set a Linux Client's description.
- [Licensing Overview](https://syteca.com/docs/administration/licensing/overview.md): Understand Syteca product license serial keys, the types available, what they contain, and the Update & Support period that governs new versions and support.
- [Activate or Update the Serial Key](https://syteca.com/docs/administration/licensing/activate-serial-key.md): Activate a new Syteca serial key or update an existing one, from the Management Tool. Two procedures depending on whether the Application Server has Internet access: online activation directly from the Management Tool, or offline activation via the Syteca website.
- [Manage the Serial Key](https://syteca.com/docs/administration/licensing/manage-serial-key.md): View, activate, update, deactivate, and proxy-configure the Syteca product license serial key on the Serial Key Management tab in the Management Tool.
- [Assign PAM Seat Licenses](https://syteca.com/docs/administration/licensing/assign-pam-seat-licenses.md): Assign and unassign Syteca PAM seat licenses (Password Management seat licenses) to users individually or by user group, so they can use PAM features.
- [Assign Endpoint Licenses to Clients](https://syteca.com/docs/administration/licensing/assign-endpoint-licenses.md): Assign Syteca endpoint licenses to Clients manually or automatically (floating licensing), and in Multi-Tenant mode, grant licenses to tenants.
- [Multi-Tenant Mode](https://syteca.com/docs/administration/multi-tenant/overview.md): Syteca Multi-Tenant mode: run one Syteca deployment as multiple isolated tenants, each with its own admin, users, Clients, licenses, alerts, and reports.
- [Manage Tenants](https://syteca.com/docs/administration/multi-tenant/manage-tenants.md): View, add, edit, change licenses, change the domain admin, delete, and switch between tenants in Syteca Multi-Tenant mode — all from the Tenants page.
- [Cross-Tenant Access](https://syteca.com/docs/administration/multi-tenant/cross-tenant-access.md): How a Syteca tenant admin grants the technician (admin of the built-in default tenant) full access to their tenant account — opt-in and revocable.
- [Application Server Resource Monitoring](https://syteca.com/docs/administration/dashboards/application-server-monitoring.md): Monitor Syteca Application Server CPU, memory, database write queue, and storage usage in real time from the System State page. Four live dashboards refresh every 5 seconds and let administrators spot resource pressure before it becomes an outage.
- [System Health Dashboards](https://syteca.com/docs/administration/dashboards/system-health-dashboards.md): Monitor Syteca system state in the Management Tool - Storage Usage, CPU, Memory, Database State, and Client status - on customizable, real-time dashboards.
- [System Error and Warning Reference](https://syteca.com/docs/administration/dashboards/system-error-reference.md): Causes and recommended actions for the specific error and warning messages that appear in the System Health Transaction Log.
- [Audit Log](https://syteca.com/docs/administration/audit-log.md): View, filter, sort, and protect the Syteca Audit log — a tamper-evident record of every administrator action performed in the Management Tool, grouped by category.
- [Syteca Encryption](https://syteca.com/docs/administration/security/encryption.md): Cryptographic architecture of Syteca — RSA-2048 Master Certificate, AES-256 for monitoring data, FIPS 140-2 certified implementations, Diffie-Hellman key exchange, and SHA-256 password hashing.
- [Master Certificate Management](https://syteca.com/docs/administration/security/master-certificate.md): Manage the Syteca Master Certificate (EkranMasterCertificate) — back up, delete, import, reissue, and optionally migrate from RSA-2048 to RSA-4096 encryption. Essential for Application Server recovery, migration, and High Availability setup.
- [Third-Party Software Used by Syteca](https://syteca.com/docs/administration/security/third-party-notices.md): Open-source components incorporated into Syteca that carry copyleft license obligations, including source-code availability under LGPLv3.
- [Add IIS Request Filtering Exceptions for Syteca](https://syteca.com/docs/administration/security/iis-request-filtering.md): Configure Internet Information Services (IIS) Request Filtering to allow the file extensions Syteca uses. Required when IIS Request Filtering is enabled with default deny rules, which is common in hardened Windows Server environments.
- [Exclude Syteca Processes from Antivirus Software](https://syteca.com/docs/administration/security/antivirus-exclusions.md): File paths, executables, and services to whitelist in antivirus software so it doesn't block Syteca or its underlying database and web server.
- [Keystroke Logging and Password Masking](https://syteca.com/docs/administration/security/keystroke-password-masking.md): How Syteca protects logged keystrokes from casual viewing and database-level exposure, and how it automatically masks passwords before they're sent.
- [Move the Master Certificate to Thales HSM](https://syteca.com/docs/administration/integrations/thales-hsm.md): Store the Syteca master certificate on a Thales HSM external storage device using SafeNet KeySecure and SafeNet ProtectApp for extra security.
- [API & Integrations](https://syteca.com/docs/api/overview.md): Integrate Syteca with your own systems — the Application Credentials Broker API, the Data Connector for BI tools, SSO/LDAP identity providers, and SIEM/ticketing systems.
- [Syteca Application Credentials Broker (ACB)](https://syteca.com/docs/api/acb/overview.md): The Syteca ACB is a stand-alone REST API for managing privileged-access secrets, folders, users, and the default admin password - for integrating Syteca PAM into automation, CI/CD pipelines, CMDB workflows, and custom security tooling.
- [Install the ACB Service](https://syteca.com/docs/api/acb/install.md): Install the Syteca Application Credentials Broker on a Windows host — system requirements (IIS, .NET 8.0, Syteca Application Server compatibility matrix), MSI installation.
- [Set Up a User Account for ACB](https://syteca.com/docs/api/acb/setup-user-account.md): Configure a Management Tool user for ACB API access — Application Account Settings, the Refresh Token, Authorization token lifetime, and IP Address restriction.
- [Edit Secret and Folder Permissions for ACB](https://syteca.com/docs/api/acb/secret-permissions.md): Configure role-based permissions on Syteca secrets and folders so the ACB API consumer can access them — Owner / Editor / PAM User roles, the Permissions tab, and where to find Secret IDs and Folder IDs.
- [Syteca ACB API Reference](https://syteca.com/docs/api/acb/api-reference.md): The Syteca ACB REST API reference — base URL, two authentication models (old vs new endpoints), status codes, rate limiting per endpoint, and the complete endpoint list.
- [Syteca ACB Data Models](https://syteca.com/docs/api/acb/data-models.md): Request and response schemas shared across Syteca ACB API endpoints — Permissions, Rotation, CheckOut, CheckPassword (heartbeat), SecretType, and the new password-status fields added in v1.4.
- [Syteca ACB CLI Reference](https://syteca.com/docs/api/acb/cli.md): Reference for the Syteca ACB command-line wrapper — SytecaACBConsole.exe — for scripting common ACB operations from the Windows command line, PowerShell, or scheduled tasks.
- [Rotate the Built-in Admin Password](https://syteca.com/docs/api/acb/admin-password-rotation.md): Use the Syteca ACB API to rotate the built-in admin user's password from your external secrets vault, CMDB, or compliance workflow — verify current password, then change to a new one.
- [Get Access Token](https://syteca.com/docs/api/acb/endpoints/get-access-token.md): Syteca ACB REST API endpoint to exchange a Refresh Token for a short-lived Access Token. The first call every API consumer makes.
- [Get Secret Details (Old)](https://syteca.com/docs/api/acb/endpoints/get-secret-details.md): Pre-v1.3 Syteca ACB endpoint for retrieving secret credentials with the Access Token in the JSON request body. Superseded by GET /api/secrets/{id}/password but still supported for backward compatibility.
- [Get Folder](https://syteca.com/docs/api/acb/endpoints/get-folder.md): Syteca ACB REST API endpoint to retrieve a folder's details — name, description, parent, and permission grants — by its ID.
- [Add Folder](https://syteca.com/docs/api/acb/endpoints/add-folder.md): Syteca ACB REST API endpoint to create a new folder for organizing secrets — with name, description, parent, and initial permission grants.
- [Update Folder](https://syteca.com/docs/api/acb/endpoints/update-folder.md): Syteca ACB REST API endpoint to update a folder's name, description, parent, or permissions. Partial update — only the fields provided are changed.
- [Delete Folder](https://syteca.com/docs/api/acb/endpoints/delete-folder.md): Syteca ACB REST API endpoint to delete a folder. Requires the folder to be empty (no child folders or secrets).
- [Get Secret](https://syteca.com/docs/api/acb/endpoints/get-secret.md): Syteca ACB REST API endpoint to retrieve a secret's metadata — type, name, description, rotation config, check-out config, heartbeat status, permissions — but NOT the password value.
- [Get Secret Credentials](https://syteca.com/docs/api/acb/endpoints/get-secret-credentials.md): Syteca ACB REST API endpoint to retrieve a secret's actual credentials — login, password, and (for SSH secrets) the SSH private key. The most frequently called ACB endpoint.
- [Add Secret](https://syteca.com/docs/api/acb/endpoints/add-secret.md): Syteca ACB REST API endpoint to create a new secret — Windows / AD / Unix SSH / Unix Telnet / Web / MSSQL account. Required vs ignored fields depend on the secret's type.
- [Update Secret](https://syteca.com/docs/api/acb/endpoints/update-secret.md): Syteca ACB REST API endpoint to update a secret — change name, target, password, rotation, check-out, heartbeat, or permissions. Partial update — only the fields provided are changed.
- [Delete Secret](https://syteca.com/docs/api/acb/endpoints/delete-secret.md): Syteca ACB REST API endpoint to delete a secret. Permanent — there is no soft-delete.
- [Rotate Secret Password](https://syteca.com/docs/api/acb/endpoints/rotate-secret-password.md): Syteca ACB REST API endpoint to trigger immediate password rotation on a secret — generates a new password and updates the target endpoint.
- [Force Check-In](https://syteca.com/docs/api/acb/endpoints/force-checkin.md): Syteca ACB REST API endpoint to forcibly check in a secret that's currently checked out — useful for releasing secrets held by absent users or unresponsive automation.
- [Heartbeat (Check Password)](https://syteca.com/docs/api/acb/endpoints/heartbeat.md): Syteca ACB REST API endpoint — NEW in v1.4 — to verify a secret's password is still valid on the target endpoint without modifying it. Useful for detecting drift between Syteca and the target system.
- [Bulk Add Secrets and Folders](https://syteca.com/docs/api/acb/endpoints/bulk-add.md): Syteca ACB REST API endpoint for bulk-creating multiple folders and secrets in a single call — the canonical migration and onboarding endpoint. Returns per-record success/error summary.
- [Verify Admin Password](https://syteca.com/docs/api/acb/endpoints/verify-password.md): Syteca ACB REST API endpoint to verify the current built-in admin password matches the value the caller expects — used before triggering a rotation to confirm vault/Syteca sync.
- [Change Admin Password](https://syteca.com/docs/api/acb/endpoints/change-admin-password.md): Syteca ACB REST API endpoint to rotate the built-in admin user's password — for automated rotation from external secrets vaults, CMDB, or compliance workflows.
- [Create Internal User](https://syteca.com/docs/api/acb/endpoints/create-internal-user.md): Syteca ACB REST API endpoint to create a new Syteca Internal user (managed entirely within Syteca, not linked to Active Directory) — for IdP-driven user provisioning workflows.
- [Create Domain User](https://syteca.com/docs/api/acb/endpoints/create-domain-user.md): Syteca ACB REST API endpoint to link an existing Active Directory user to Syteca — for AD-integrated provisioning workflows.
- [Get User Details](https://syteca.com/docs/api/acb/endpoints/get-user-details.md): Syteca ACB REST API endpoint to retrieve a user's details — login, type, administrative permissions, Client access rules, User-to-User access rules, group memberships.
- [Delete User](https://syteca.com/docs/api/acb/endpoints/delete-user.md): Syteca ACB REST API endpoint to delete a Syteca user — for offboarding, contractor cleanup, and IdP-driven deprovisioning.
- [Update Admin Permissions](https://syteca.com/docs/api/acb/endpoints/update-admin-permissions.md): Syteca ACB REST API endpoint to update a user's administrative permissions — User Management, Privileged Accounts Management, Tenant Management, and other admin capabilities.
- [Update Client Access Permissions](https://syteca.com/docs/api/acb/endpoints/update-client-access.md): Syteca ACB REST API endpoint to update which Syteca Clients a user can see and access — defines monitoring scope by Client, Client group, or rule pattern.
- [Update User-to-User Access Permissions](https://syteca.com/docs/api/acb/endpoints/update-user-access.md): Syteca ACB REST API endpoint to update which other Syteca users a user can see and manage — defines scope for permission delegation, group membership management, and User Management actions.
- [Add User to Group](https://syteca.com/docs/api/acb/endpoints/add-user-to-group.md): Syteca ACB REST API endpoint to add a user to a Syteca user group — for IdP-driven group membership sync, AD group mirroring, and team-based onboarding.
- [Remove User from Group](https://syteca.com/docs/api/acb/endpoints/remove-user-from-group.md): Syteca ACB REST API endpoint to remove a user from a Syteca user group — for IdP-driven membership cleanup, role-change automation, and offboarding workflows.
- [Get folder by ID](https://syteca.com/docs/api-reference/folders/get-folder-by-id.md): Retrieves a specific folder by its ID
- [Delete folder](https://syteca.com/docs/api-reference/folders/delete-folder.md): Deletes a folder by its ID
- [Update folder](https://syteca.com/docs/api-reference/folders/update-folder.md): Updates an existing folder with the provided data
- [Add new folder](https://syteca.com/docs/api-reference/folders/add-new-folder.md): Creates a new folder with the provided data
- [Get secret by ID](https://syteca.com/docs/api-reference/secrets/get-secret-by-id.md): Retrieves a specific secret by its ID (without password data)
- [Delete secret](https://syteca.com/docs/api-reference/secrets/delete-secret.md): Deletes a secret by its ID
- [Update secret](https://syteca.com/docs/api-reference/secrets/update-secret.md): Updates an existing secret with the provided data
- [Get secret credentials](https://syteca.com/docs/api-reference/secrets/get-secret-credentials.md): Retrieves the credentials (password/private key) for a specific secret
- [Add new secret](https://syteca.com/docs/api-reference/secrets/add-new-secret.md): Creates a new secret with the provided data
- [Rotate secret password](https://syteca.com/docs/api-reference/secrets/rotate-secret-password.md): Initiates password rotation for the specified secret
- [Force check-in secret](https://syteca.com/docs/api-reference/secrets/force-check-in-secret.md): Forces check-in of a secret that is currently checked out
- [Check secret password (Heartbeat)](https://syteca.com/docs/api-reference/secrets/check-secret-password-heartbeat.md): Initiates a heartbeat check to verify the secret's password is still valid
- [Bulk add secrets and folders](https://syteca.com/docs/api-reference/bulk-operations/bulk-add-secrets-and-folders.md): Creates multiple secrets and folders in a single operation
- [Exchange Refresh Token for Access Token](https://syteca.com/docs/api-reference/old-endpoints/exchange-refresh-token-for-access-token.md): Pre-v1.3 endpoint to exchange a Refresh Token for a short-lived Access Token. First call every ACB consumer makes.
- [Get secret credentials (pre-v1.3 endpoint)](https://syteca.com/docs/api-reference/old-endpoints/get-secret-credentials-pre-v13-endpoint.md): Pre-v1.3 endpoint for retrieving secret credentials. Superseded by GET /api/secrets/{id}/password but still supported for backward compatibility. Access Token goes in the JSON body, not a header.
- [Syteca API Data Connector](https://syteca.com/docs/api/data-connector/overview.md): The Syteca API Data Connector is a stand-alone REST API for exporting Syteca monitoring data — Client sessions, user productivity, application and URL statistics, alert events, and access requests — into BI tools, custom dashboards, and SOC integrations.
- [Install the Data Connector](https://syteca.com/docs/api/data-connector/install.md): Install the Syteca API Data Connector on a Windows host — system requirements (IIS, .NET 8.0, Syteca Application Server 7.14+), MSI installation with version compatibility matrix, and the three-step IIS self-signed certificate setup.
- [Manage the Data Connector](https://syteca.com/docs/api/data-connector/manage.md): After installing the Syteca API Data Connector, manage it from the Management Tool's Applications tab — view registration status, see version info, and deactivate (remove integration) when needed.
- [Syteca API Reference](https://syteca.com/docs/api/data-connector/api-reference.md): The Syteca Data Connector REST API reference — base URL, ApiKey authentication, time-parameter conventions, pagination, status codes, and the nine available endpoints.
- [List Clients](https://syteca.com/docs/api/data-connector/endpoints/get-clients.md): Syteca Data Connector REST API endpoint to retrieve the list of Clients — returns each Client's GUID and name.
- [List Sessions](https://syteca.com/docs/api/data-connector/endpoints/get-sessions.md): Syteca Data Connector REST API endpoint to retrieve a list of Client sessions with basic details — Client GUID, session ID, user ID, login/logout dates.
- [List Sessions with Productivity](https://syteca.com/docs/api/data-connector/endpoints/post-sessions.md): Syteca Data Connector REST API endpoint to retrieve sessions with full productivity details — duration, idle time, productive time, user name — with pagination support.
- [Application Statistics](https://syteca.com/docs/api/data-connector/endpoints/get-application-statistics.md): Syteca Data Connector REST API endpoint returning the total time spent using each application during each hour of each session — useful for productivity dashboards.
- [URL Statistics](https://syteca.com/docs/api/data-connector/endpoints/get-url-statistics.md): Syteca Data Connector REST API endpoint returning the total time spent visiting each website during each hour of each session.
- [List Users](https://syteca.com/docs/api/data-connector/endpoints/get-users.md): Syteca Data Connector REST API endpoint to retrieve the list of users — returns each user's ID and name.
- [User Productivity](https://syteca.com/docs/api/data-connector/endpoints/get-user-productivity.md): Syteca Data Connector REST API endpoint returning total active time per user per hour per day — the canonical endpoint for productivity dashboards.
- [List Alerts](https://syteca.com/docs/api/data-connector/endpoints/get-alerts.md): Syteca Data Connector REST API endpoint returning alert events with full details — alert name, user, Client, triggering activity, and a deep-link into the Session Viewer. Paginated.
- [List Endpoint Access Requests](https://syteca.com/docs/api/data-connector/endpoints/get-endpoint-access-requests.md): Syteca Data Connector REST API endpoint returning processed Endpoint Access Control access requests with full audit details — requester, session duration, status, approver, comments. Paginated.
- [Power BI Example](https://syteca.com/docs/api/data-connector/power-bi-example.md): End-to-end use case — import Syteca monitoring data into Microsoft Power BI report templates using the Syteca API Data Connector. Includes example report views for idle time, productivity, and application usage.
- [SSO Integration](https://syteca.com/docs/administration/integrations/sso.md): Configure Syteca to authenticate Management Tool users through your organization's Single Sign-On provider, including Azure, Okta, ForgeRock, and Keycloak.
- [Configure Azure SSO Integration](https://syteca.com/docs/administration/integrations/sso-azure.md): Set up SAML 2.0 Single Sign-On between Microsoft Azure Enterprise Applications and the Syteca Management Tool.
- [Configure Okta SSO Integration](https://syteca.com/docs/administration/integrations/sso-okta.md): Set up SAML 2.0 Single Sign-On between Okta and the Syteca Management Tool, including the OpenSSL certificate Okta requires.
- [Configure ForgeRock SSO Integration](https://syteca.com/docs/administration/integrations/sso-forgerock.md): Set up SAML 2.0 Single Sign-On between ForgeRock Access Management and the Syteca Management Tool.
- [Configure Keycloak SSO Integration](https://syteca.com/docs/administration/integrations/keycloak-sso.md): Set up SAML 2.0 Single Sign-On between Keycloak (with an LDAP-backed realm) and the Syteca Management Tool.
- [Add LDAP Targets Manually](https://syteca.com/docs/administration/integrations/ldap-targets.md): Connect Syteca to Active Directory by adding LDAP targets. Two options: a single AD domain via LDAP or LDAPS, or an entire AD forest via an AD Global Catalog. Both configured manually on the LDAP Targets tab of the Configuration page.
- [Configure Microsoft Entra ID Domain Services Integration](https://syteca.com/docs/administration/integrations/entra-id-domain-services.md): Deploy Microsoft Entra Domain Services and connect it to Syteca as an LDAP target, so Entra ID accounts can be used to log in to the Management Tool.
- [SIEM Integration](https://syteca.com/docs/administration/integrations/siem.md): Stream Syteca user-activity, alert, and audit events to Splunk, ArcSight, IBM QRadar, Elastic, and any Syslog-compatible SIEM in CEF or LEEF format.
- [Ticketing System Integration](https://syteca.com/docs/administration/integrations/ticketing-system.md): Tie privileged access to a real ticket: Syteca validates the ticket number at login, blocks access without one, and attaches the session recording back to the ticket.
- [API Bridge for Ticketing Systems](https://syteca.com/docs/api/integrations/api-bridge.md): Integrate Syteca with any ticketing system — Jira, Freshservice, in-house, anything — via a self-hosted REST adapter. Build once, no Syteca product update required.
- [Request a Session ID](https://syteca.com/docs/api/integrations/connect.md): Establish a session with the ticketing system through the API Bridge and receive a session ID for subsequent calls.
- [Get the Ticket Status](https://syteca.com/docs/api/integrations/ticket-status.md): Validate that a ticket exists and is not closed through the API Bridge. Returns status 0 (not found), 1 (active), or 2 (closed).
- [Add a Comment to a Ticket](https://syteca.com/docs/api/integrations/add-ticket-comment.md): Add a comment to a ticket through the API Bridge, typically a link to the corresponding session in the Syteca monitoring results.
- [Configure Syteca Integration with Venn](https://syteca.com/docs/administration/integrations/venn.md): Restrict Syteca monitoring to only the applications opened inside a Venn workspace on Windows and macOS Clients.
- [Release Notes](https://syteca.com/docs/release-notes/overview.md): Syteca release notes - new features, improvements, and issue fixes in each Syteca version, plus changelogs for Application Credentials Broker, Master Panel, and Data Connector.
- [Syteca 7.25](https://syteca.com/docs/release-notes/v7-25.md): Release notes for Syteca version 7.25 - Windows applications and websites filter redesign.
- [Syteca 7.24](https://syteca.com/docs/release-notes/v7-24.md): Release notes for Syteca version 7.24 - Windows account dependency discovery, secret Heartbeat, Network device secrets, Linux PAM Connection Manager secrets, and a redesigned Password Management page.
- [Syteca 7.23](https://syteca.com/docs/release-notes/v7-23.md): Release notes for Syteca version 7.23 - .NET 8.0 requirement, RSA-4096 encryption, NOSUPERUSER privilege changes, and Sensitive Data Masking refinements.
- [Syteca 7.22](https://syteca.com/docs/release-notes/v7-22.md): Release notes for Syteca version 7.22 — SELinux Linux Client support, RPM packaging, 2FA for Linux GUI sessions, ACB 1.2, and LDAP OU-scoped targets.
- [Syteca 7.21](https://syteca.com/docs/release-notes/v7-21.md): Release notes for Syteca version 7.21 — new Management Tool UI design, Web Connection Manager (agentless PAM), Sensitive Data Masking, and Kill Application on macOS.
- [Syteca 7.20](https://syteca.com/docs/release-notes/v7-20.md): Release notes for Syteca version 7.20 — Full Motion Capture mode, Linux Account Discovery, gMSA/sMSA for MS SQL, dashboards relocation, and ACB rotation API.
- [Syteca 7.19](https://syteca.com/docs/release-notes/v7-19.md): Release notes for Syteca version 7.19 — new Access Request and Secondary User Authentication report types, Pseudonymizer Supervisor exclusion list, Forensic Export comments.
- [Syteca 7.18](https://syteca.com/docs/release-notes/v7-18.md): Release notes for Syteca version 7.18 — new flexible licensing model with PAM seat licenses, Account Discovery introduced, session recording while secret is in use.
- [Syteca 7.17](https://syteca.com/docs/release-notes/v7-17.md): Release notes for Syteca version 7.17 — SIEM Client offline/online events, macOS application and URL filtering, Venn integration for macOS, secret auditing.
- [Syteca 7.16](https://syteca.com/docs/release-notes/v7-16.md): Release notes for Syteca version 7.16 — SSL encryption for database connections, regex alert rules on Windows, ESET integration, archive without binary deletion.
- [Syteca 7.15](https://syteca.com/docs/release-notes/v7-15.md): Release notes for Syteca version 7.15 — macOS Hidden Client, Terminal Server (Limited Sessions) for Linux, recording only on alert/USB trigger.
- [Syteca 7.14](https://syteca.com/docs/release-notes/v7-14.md): Release notes for Syteca version 7.14 — Workforce Password Management (WPM) introduced, Pseudonymizer de-anonymization password, SSO auto-create control.
- [Syteca 7.13](https://syteca.com/docs/release-notes/v7-13.md): Release notes for Syteca version 7.13 — AD secret host restriction, Linux additional message on login, Pseudonymizer de-anonymization password, Terminal Server limited sessions.
- [Syteca 7.12](https://syteca.com/docs/release-notes/v7-12.md): Release notes for Syteca version 7.12 — BI productivity dashboards, macOS AES-256 encryption, SELinux improvements, AD-integrated macOS monitoring, Session Viewing Status report.
- [Syteca 7.9](https://syteca.com/docs/release-notes/v7-9.md): Release notes for Syteca version 7.9 — macOS and Linux Client support for SaaS deployments, MSI installer for SaaS Clients, MSI+INI custom installation package.
- [Application Credentials Broker (ACB)](https://syteca.com/docs/release-notes/components/acb.md): Version history for the Syteca Application Credentials Broker — the REST API tool that lets applications retrieve secret data without logging in to the Management Tool.
- [Master Panel](https://syteca.com/docs/release-notes/components/master-panel.md): Version history for the Syteca Master Panel — the stand-alone component that lets large organizations view sessions from multiple Syteca deployments in one interface.
- [API Data Connector](https://syteca.com/docs/release-notes/components/data-connector.md): Version history for the Syteca API Data Connector — the stand-alone component used for integrating a customer's IT system with Syteca via the REST API.
- [Resources](https://syteca.com/docs/resources/overview.md): Answers to common questions, troubleshooting guides for the Application Server, Clients, and database, and reference material like the full features list and glossary.
- [Frequently Asked Questions about Syteca](https://syteca.com/docs/resources/faq.md): Quick answers to common pre-purchase and technical questions about Syteca.
- [Frequently Asked Questions about Syteca Clients](https://syteca.com/docs/resources/faq/clients.md): Quick answers to common pre-purchase and technical questions about Syteca Clients: multi-monitor recording, hiding the Client from users, user notifications about monitoring, and preventing users from tampering with the recorded data.
- [Troubleshooting](https://syteca.com/docs/resources/troubleshooting.md): Symptoms, causes, and fixes for the most common Syteca issues. Start here before opening a support ticket.
- [Application Server Troubleshooting](https://syteca.com/docs/resources/troubleshooting/application-server-troubleshooting.md): Diagnose and resolve common Syteca Application Server issues, including SMB errors, service start failures, database connection loss, Management Tool availability errors, and MS SQL trigger blocking. Organized by symptom for quick lookup.
- [Client Troubleshooting](https://syteca.com/docs/resources/troubleshooting/client-troubleshooting.md): Diagnose why a Syteca Client shows as offline, and define which network interface a Windows Client uses to connect to the Application Server.
- [Client Installation and Uninstallation Issues](https://syteca.com/docs/resources/troubleshooting/install-uninstall-troubleshooting.md): Diagnose remote Windows Client installation failures — admin share access, UAC, DNS, Active Directory trust issues — and common uninstallation errors.
- [Management Tool Troubleshooting](https://syteca.com/docs/resources/troubleshooting/management-tool-troubleshooting.md): Fix the System Health free-space warning, resolve a Chrome browser SSL certificate error, and legacy Internet Explorer login steps.
- [Linux Client Troubleshooting](https://syteca.com/docs/resources/troubleshooting/linux-client-troubleshooting.md): Configure an SSH jump server so tunneled connections are logged, and resolve SSH connection delays on Linux endpoints using mDNS.
- [Database Server Issues and Error Messages](https://syteca.com/docs/resources/troubleshooting/database-server-errors.md): Causes and fixes for common Application Server database connection errors, cleanup failures, and database migration questions.
- [Configure PostgreSQL for Maximum Performance](https://syteca.com/docs/resources/troubleshooting/postgresql-performance-tuning.md): Use pgTune to generate optimized PostgreSQL configuration settings for a Syteca deployment.
- [Create a self-signed certificate for SIEM TLS](https://syteca.com/docs/resources/troubleshooting/self-signed-ssl-certificate.md): Create a self-signed certificate for SIEM TLS
- [Syteca Logs](https://syteca.com/docs/resources/troubleshooting/logs.md): Download and configure Application Server, Management Tool, and Client log files for troubleshooting or for the Syteca Support team.
- [Syteca Features](https://syteca.com/docs/resources/features-list.md): Complete capability catalog for Syteca — every feature, every category, with direct links to the detailed documentation for each. Useful for buyers, compliance reviewers, and admins.
- [Syteca Professional Services](https://syteca.com/docs/resources/professional-services.md): Tailored evaluation, planning, implementation, and post-deployment services from Syteca's professional services team.
- [Terms of Syteca Software Support Services](https://syteca.com/docs/resources/terms-of-support-services.md): The terms and conditions governing the provision of Software Support Services by Syteca Inc. to Customers, including SLA response and resolution times.

## OpenAPI Specs

- [api-bridge-openapi](https://syteca.com/docs/api-specs/api-bridge-openapi.yaml)
- [acb-user-management](https://syteca.com/docs/api-specs/acb-user-management.yaml)
- [acb-secrets](https://syteca.com/docs/api-specs/acb-secrets.yaml)
- [openapi](https://syteca.com/docs/api-reference/openapi.json)