The team used Pam Terminal to broker vendor access into OT jump hosts so OEMs can support PLCs and HMIs without permanent VPN accounts.
“OEMs connect through Pam Terminal for a shift, we record everything, and access expires when the maintenance window ends. No more passwords taped to the jump PC.”
Needs
Plant jump PCs held long-lived vendor passwords and remote tools with uneven logging.
Production downtime windows were short; granting access had to be minutes, not days of paperwork alone.
Security needed a clear boundary between corporate IT and OT support paths.
How the Team Uses Pam Terminal
Vendors authenticate, then only see OT jump assets allowed for that work order.
“Recording is non-negotiable for anyone who touches a line controller — including our own engineers.”
Shift supervisors approve temporary strategies aligned to maintenance tickets.
Results
Measured improvements after OT vendor access moved to Pam Terminal.
0
Plant-Floor Password Notes
3X
Faster Vendor Onboarding
100%
OT Support Sessions Recorded
90%
Fewer Standing Vendor VPN Accounts
30m
Avg Access Grant During Outages
6m
Recording Retention for Incidents
