Privileged Session Manager for SSH


CyberArk may choose not to provide maintenance and support services forPSM for SSH  with relation to any end-user client machine or target platforms which have reached their formal End-of-Life date, as published by their respective vendors from time to time. For more details, contact your CyberArk support representative.

PSM for SSH  is a CyberArk component that enables you to secure, control and monitor privileged access to Linux and Unix systems, network devices and any other SSH-based devices. PSM for SSH requires a dedicated machine which is accessible to the network.

Supported Operating Systems

PSM for SSH can be installed on the following operating systems:

  • Red Hat Enterprise Linux version 7 including all minor versions
  • Red Hat Enterprise Linux version 8 including all minor versions
  • Rocky Linux 8 including all minor versions

  • CentOS Linux version 7.9


    Security patches and OS vendor recommended minor RHEL and CentOS upgrades can be applied on the server without reinstalling PSM for SSH.

  • SUSE Linux Enterprise Server 12.4, 12.5

  • PSM for SSH can be installed on Amazon Web Services (AWS), Microsoft Azure, and Google Cloud platforms

Minimum server requirements

PSM for SSH supported protocols

Unix, Linux and Network devices using the following protocols:

  • SSH (including SSH-Tunneling)

  • Telnet

Supported SSH clients on the end-user machine

PSM for SSH allows access from any SSH client that can connect to an OpenSSH 7.7 server.


OpenSSH 7.7 requires that Open SSL V1.01 or above be installed.

Supported connections

PSM for SSH supports connections to remote machines using IPv4 and IPv6 addresses.

Storage requirement on the Digital Vault server

PSM for SSH stores the session recordings on the Digital Vault server. The estimated storage requirement is approximately 1-5 KB for each minute of a recording session. The recording size is affected by the number of activities that are performed during the session.

For example, 5 GB of storage will be sufficient for recording 10 hours of activities per day retained for 5 years.

CyberArk component compatibility

PSM for SSH is compatible with the following CyberArk components:

  • Digital Vault server
  • Password Vault Web Access
  • Privileged Session Manager
  • CPM

Each version of PSM for SSH is compatible with all versions of these components that have not reached their End of Development date at the time the PSM for SSH version was released.

For example, PSM for SSH 11.7 was released in October 2020 and is compatible with version 10.6 and higher of these components, but PSM for SSH 11.5, which was released in June 2020, is compatible with version 10.4 and higher of these components.

AD Bridge capabilities