Skip to main content

BeyondInsight / Password Safe

Manage privileged passwords, accounts, keys, secrets, and sessions for people and machines and secure non-privileged employee passwords for business applications.

269 Topics
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - June - Password Safe

Discover What's New in Password Safe 25.1 Workforce Passwords for PathfinderWith Password Safe 25.1, Workforce Passwords is fully compatible with Pathfinder! Previously, the extension didn’t work when customers were activated in Pathfinder. Now, everything runs as expected. Plus, there’s a great new feature on the login screen: a handy dropdown menu that lets you choose your login portal. Simply select Pathfinder to sign in via beyondtrust.io, then enter your Pathfinder credentials to access your Workforce Passwords secrets with ease. Mobile Application Session Timeout SettingIn Password Safe Cloud and on-prem, you’re in control - configure the Mobile app to auto-timeout after a set number of minutes! Deployable WFP ExtensionWorkforce Passwords makes it easy and secure to store and access business credentials right from your browser. And now with Password Safe 25.1, deploying the WFP browser extension is smoother than ever! Admins can effortlessly roll out the extension across Chrome,

210
B
Community Manager
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - May - Password Safe

Azure Key Vault - Password Safe Custom Plugin While there is a Platform Plugin for Azure AD /Entra ID out-of-the-box, it is used for managing Entra ID Users passwords.  We have seen demand over the years for the capability to manage Azure Key Vault credentials. The Plugin covered in this guide includes support for managing Secrets.  Capabilities  Change Managed Account Credentials using Functional Account Change Functional Account Credentials Verify Managed Account Credentials Verify Functional Account Credentials Discover Accounts The Password Safe Resource Kit includes a SDK for developing Custom Plugins. The SDK comes with a Sample Plugin example, which has been used to create this Custom Plugin example to allow for the rotation of Secrets in Azure Key Vault. Read more here Latest Available Version:Password Safe 24.3– December 2024 Beekeepers Hot Topics PasswordSafe/ WebConsole login  “Hi Team,I have a query regarding web console login: "Can we use the same user account for

370
B
Community Manager
P
prasadp87Trailblazer
asked in General
Email notifications for Password change and next password change date

Hello,We have the following use case related to email notification - Notify certain email IDs with message about password is rotated in password safe. Notify certain email IDs about next password change date.I have seen below KBA article for email notification- BeyondInsight / Password Safe - How to add, change or remove email notificationsDoes ‘release notifications for Managed Accounts’ help with above requirements.I would like to understand the feasibility on these email notifications. Thanks,Prasad

01
H
BeyondTrust Employee
B
bt101Veteran
asked in General
Passwordsafe - Group and Features logic - User in multiple groups

Hello! If the a user is part of two Security Groups and each group has different features enabled (under Configuration > User management > Groups >     Group-Name - Features. Will the user get all the enabled features or only one of the Groups will take preference.

03
rhagerm
P
prakash.rRising Star
asked in General
How to enable "Automatic Password Change" for local Linux servers?

Hi all,I’m in the process of onboarding over 100 local Linux servers into BeyondTrust Password Safe, and I’m looking for a more efficient way to handle FA (Functional Account) assignment during setup.Steps I’ve taken so far: Added all 100+ servers to an Address Group Created an asset-based Smart Rule Set the assets within the Smart Rule to be Managed by Password Safe However, when I try to enable Automatic Password Change Options, I’m only able to assign one FA (From smart rule). Since each server requires a unique FA, manually creating individual Smart Rules for each server would be highly inefficient.Question:Is there a way to automate or bulk assign one FA per server without having to create a separate Smart Rule for each one?Thanks in advance for your help!

10611
Paul Dann
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Delete the Completed Session Recordings when no longer needed (after x days)

Hi everyone,Is it possible to delete the completed session recordings after x days when no longer needed for auditing?For example, some clients have to maintain the records for a maximum of 1yr for auditing, after that logs/records can be deleted.I know there is no option in Password Safe console, Looking for backend alternative methods.

233
MikeK
H
HigorApprentice
asked in General
Is there any documentation or guide to help users to use Copy and Past file in Linux system?

Is there any documentation or guide to help users to use Copy and Past file in Linux system?

71
Prudhvi Keertipati
H
HigorApprentice
asked in General
license assigned to my Password Safe Cloud

Is there a way to check the number of license assigned to my Password Safe Cloud by UI?

143
H
BeyondTrust Employee
H
HigorApprentice
asked in General
SAML Account removed from Administrator

Hi, for any reason may saml account is removed from local Administrators group from Password Safe Cloud. Is there any reason

246
Prudhvi Keertipati
T
tmontagueApprentice
asked in General
Automatically linking multiple managed accounts to managed systems based on services

I’m trying to figure out if this is even possible.  I feel like it is, but I’m probably missing how to accomplish it.So we have 60 something Windows servers running SQL server.  We have 20 something AD accounts that run SQL on these various servers.  Ideally what I’d like to do is build a rule that adds the appropriate linked managed system to each managed account that is running the SQL services on those systems. So the end result would be I could go into each account, and see the system or systems that it is running SQL on.I’d really like this to work automatically so that any time a new server is added, or an account is added to another system, it automatically gets added to the list of linked systems for that account.    I can easily create rules to get a list of all of these servers running sql.  I can also easily create a rule that shows me all of these accounts (they all start with the same thing).  But is there a way to then just link each account to the appropriate server with

363
T
H
HigorApprentice
asked in General
Unregister Resource Broker

Supposed I have two PS Cloud instance and I have a need to remove a Resource Broker from one tenant to connect to another tenant, is it just a matter to unregister it from the old tenant and register in it in new? Any additional consideration?

112
Prudhvi Keertipati
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Jul 7 - Jul 14)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0020179 - Error "Secrets Safe unavailable An error occurred when attempting to communicate with the Secrets Safe service Please contact your administrator to resolve" KB0021724 - How to use psrun command KB0021774 - BeyondTrust Discovery tool teste error 400: BadRequest KB0021913 - Resource Broker installation error: Install validation failed. Error details: Failed to validate resource broker limit. Status code Unauthorized. KB0022634 - No data shows after generating a report KB0022651 - How to install the Resource Broker via command line

50
GloriaB
BeyondTrust Employee
H
HigorApprentice
asked in General
FA Linux Server

I have 300 Linux servers and need to onboard them as a managed system. What would be the best practice in terms of Functional Account? ONE FA to all Linux server or one FA to each linux server? They are all local accounts.

91
H
BeyondTrust Employee
K
kgujasApprentice
asked in General
Active/Active Password Safe Configuration

Hi. I need to configure an Active Active PS configuration. I have installed the managament node and connect it to external SQL database and everything is OK for this. Now I start to configure the worker node and I need to connect this nod to the same SQL database but after I put in the credentials and the crypto key from managament node I am getting this error when click on test > Connection test failed. Could not connect to existing database. Can anyone, please, help me with this...what is the problem, what is the right way to configure an Active/active configuration 1managament/1workernode.

1596
H
BeyondTrust Employee
C
Carlos MendonçaTrailblazer
asked in General
Password Safe - Managed Account

Hello,Please, how do I synchronize user accounts in the domain to managed accounts? To have visibility of all user accounts and rotate the password if necessary.  

394
C
L
lineVeteran
asked in General
Functionnal account and RDS Apps

Hi, I set the functionnal account for application (using RDS) for many users, I have one RDS Server on which i install all the apps. I can see that when one users launch the apps, the functionnal account disconnect on the other person that was using the apps, why? Is there any setting i missed? The functionnal account is suppose to work at the same time, for many users. Best,

131
H
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Password Safe Appliance - Oracle Cloud Infrastructure (OCI)

Has any one deployed BeyondInsight Password Safe Appliance on Oracle Cloud Infrastructure (OCI)? If yes, which appliance image was used?  Is deploying the appliance on OCI supported by BeyondTrust?

221
H
BeyondTrust Employee
P
prakash.rRising Star
asked in General
Caching Issue with Web Applications via Password Safe and Microsoft Remote Desktop on MacOS

Hi,{This issue is only applicable to MacOS environments}Is anyone facing an issue where, when launching a web application (using PSautomate) via Password Safe in MacOS using the Microsoft Remote Desktop application, there is some sort of caching issue? For example, let’s say I download the RDP file for a web application at "https://app1.example.com"; the Microsoft Remote Desktop will prompt an “RDP certificate warning,” and the user will click "Continue," allowing the browser and web application to launch successfully. Example of “RDP Certificate Warning” However, once they close this web application browser (browser only and not the entire Microsoft remote desktop app) and launch another web application session (such as "https://app2.example.com") using a new RDP file downloaded from the Password Safe portal, it doesn’t prompt the “RDP certificate warning” and instead launches the old web application ("https://app1.example.com") session instead of the new one, even though we clearly l

301
J
BeyondTrust Employee
S
SFATrailblazer
asked in General
Anyone know what is this error related to when doing custom platform plugin?

Anyone know what is this error related to when doing custom platform plugin?    

183
S
S
SFATrailblazer
asked in General
how to run powershellscript to change password

Hi I have application API to change password , how can I use it to trigger password change via PAM. For using application host, I am unable to use WINDOWS system . I found this link here-Resource Kit SDK Plugin for PowerShell Scripts -Should I go with above? or propagation action? If using propagation action, what needs to be the platform? I mainly want to do trigger generation of password based of password policy, update it just in the BT DB and not try to apply in system account. I have a windows system with the script and want to trigger change of password from BT .  

635
Prudhvi Keertipati
A
AmilaKRising Star
posted in General
RDS CAL Licenses for Application Sessions

Hi Guys,How can we calculate RDS user CAL licenses for below use case for password safe.One PAM user (requestor) is having concurrent 3 applications with one functional account.Do we required 3 RDS CAL licenses or 1 RDS CAL license ?    

2616
J
BeyondTrust Employee
B
bt101Veteran
asked in General
Password Safe onboarding and rotating Linux local accounts

Hello,  We have Linux desktops which have non-root account which is in sudoers. This account has a common password while imaging which gets rotated every n days outside Passwordsafe (PS)I see that we need a functional account that has ability to rotate other local accounts , which should be used to onboard these accounts to Passwordsafe. As this non-root account has a fixed initial password for each newly imaged desktop , can we use it as a Functional account in PasswordSafe and check the option “ Use Own Credentials” to Manage/Rotate password in smart rule. I am assuming that this will work as initial password of non-root account will be used by PS to onboard the account and then it will change its own password when smart rule is processed. Is my understanding correct ? am I missing anything that could result in any issues

251
Paulo144
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
BeyondInsight / Password Safe Cloud - Smart Card Authentication

Hello everyone. Need your inputs with enabling the Smart Card Authentication in Password Safe Cloud. I have configured it as below.when I try to access the url http://hostname.ps.beyondtrustcloud.com/RetinaCSSC and I’m getting 403 - Forbidden error.   

101
Paulo144
A
AyanWSTrailblazer
asked in General
Extended RDP session - 2-4 days

Team,I am curious to know whether it’s possible to extend/allow RDP session for more than 2 days. Concern team wants to perform a job and they might need to keep the session active for about 2 days at least. Is it something we can leverage from BI console? Please suggest.

702
A
A
Anil ReddyApprentice
asked in General
virtual appliance deployment on vm for passwordsafe on prem

HI All, Planning to configure on prem virtual appliance on VM new server to deploy the BI and passwordsafe.Can you share any one the article to start the deployment step onwords ,how we can go head to complete this new setup for testing purpose we are planning to deploy only one appliance. Thanks 

414
Prudhvi Keertipati

Badge Earners

  • BCA: Password Safe
    shivabillahas earned the badge BCA: Password Safe
  • BCA: Endpoint Privilege Management - Linux
    Sarah Fadelhas earned the badge BCA: Endpoint Privilege Management - Linux
  • BCA: Remote Support
    Furqanhas earned the badge BCA: Remote Support
  • BCA: Privileged Remote Access
    Furqanhas earned the badge BCA: Privileged Remote Access
  • BCA: Remote Support
    IanSeylerhas earned the badge BCA: Remote Support
Show all badges
Terms & ConditionsCookie settings