DVLS PAM to Hub migration

Hi @jm2,

Thank you for reaching out, currently there's no proper migration path without any pitfalls. A PowerShell script using the Get-DSPamVault and Get-DSPamAccount commands could export the accounts for you and you could import them using the New-HubEntry but PAM providers won't follow through this path and you'd have to recreate them in Hub and re-map the PAM accounts to their providers.

We'll look into this and follow up with a more definitive response and hopefully a more pleasant solution.

Cheers,

Sounds good, manual recreation of thousands of PAM accounts would certainly be unpleasant.

Hopefully the solution will allow retaining the existing unique identifiers, so the credential linking between connection and PAM entries remain intact

Hi Luc,

Any update on this one?

Thanks
Joe

Hi @jm2,

We discussed internally and will be looking into allowing proper export and import of PAM accounts and their providers. The only caveat will be that any secrets set in the provider will have to be re-entered once imported as to prevent privileged provider secret exfiltration.

I can't provide a concrete ETA for now, but it won't be available before the 2026.3 release cycle.

Cheers,

ok, thanks Luc.