Skip to main content

BeyondInsight / Password Safe

Manage privileged passwords, accounts, keys, secrets, and sessions for people and machines and secure non-privileged employee passwords for business applications.

313 Topics
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - May - Password Safe
Monthly Buzz - May - Password Safe

Azure Key Vault - Password Safe Custom Plugin While there is a Platform Plugin for Azure AD /Entra ID out-of-the-box, it is used for managing Entra ID Users passwords.  We have seen demand over the years for the capability to manage Azure Key Vault credentials. The Plugin covered in this guide includes support for managing Secrets.  Capabilities  Change Managed Account Credentials using Functional Account Change Functional Account Credentials Verify Managed Account Credentials Verify Functional Account Credentials Discover Accounts The Password Safe Resource Kit includes a SDK for developing Custom Plugins. The SDK comes with a Sample Plugin example, which has been used to create this Custom Plugin example to allow for the rotation of Secrets in Azure Key Vault. Read more here Latest Available Version:Password Safe 24.3– December 2024 Beekeepers Hot Topics PasswordSafe/ WebConsole login  “Hi Team,I have a query regarding web console login: "Can we use the same user account for

440
B
Community Manager
I
immi563Rising Star
asked in General
Black background colour when server accessed using BeyondTrust password Safe

Hi team, We are seeing one issue for Windows Server accessed using the password safe. When user is trying to connect the server from Password safe, RDP session is launched and user sees the black background. However when users, tries to connect the same sever outside of BT, user sees the blue background.Has anyone seen this kind of issue? Can anyone please guide to understand what's the problem and how to get is resolved.? Regards,Imran Aliyani

70
I
J
JosmayNewcomer
asked in General
Does Workforce support SAML?

I'm having a use case issue: we bring the group and user directly from AD. When I log in through Workforce, it takes a long time and doesn't inject the credentials. I don't know if the tool only supports local users? I have that question. Regards.

91
frank.colvin
P
prasadp87Trailblazer
posted in General
How to Stop running Scan jobs from background

Hello All, We have one discovery scan job running from long time. We are looking for option from background (possibly from DB query) to stop running scan job.We tried to stop from UI but it seems it's still running.Any help will be appreciated. Thanks,Prasad

275
P
Arno
ArnoApprentice
asked in General
Direct Connect with more options

Hi, Is there already a time frame for when Direct Connect will be expanded to include the attributes “Reason” and “Ticket”? Or is this not planned at all?https://beyondtrust-public.ideas.aha.io/ideas/T2PSM-I-753 Regards Arno

40
Arno
R
RidwaanKApprentice
asked in General
Platform update or migration

Hello Beekeepers We have a scenario where we want split out managed system from one platform to another with removing the systems from password safe as manage system.Example we have Redhat Linux servers using a custom Linux platform and also have centos on the same platform and now we want to separate it so we can apply separate functional account and rules .Is this possible somehow without impacting the managed systems 

10
R
Chitta2019
Chitta2019Trailblazer
asked in General
Not Able to Delete Workgroup

I tried this KB article https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0020899 still I am not able to delete workgroup. I have checked everything still not able to delete.What to Check Location in BeyondInsight Functional Accounts Configuration > Privileged Access Management > Functional Accounts Managed Accounts Configuration > Managed Accounts Session Agents Configuration > Privileged Access Management Agents > Session Agents Scanner Agents Discovery > Discovery Scanners Smart Rules Configuration > Smart Rules Worker Nodes Configuration > Privileged Access Management Agents > Worker Nodes Resource Zones Configuration > Privileged Access Management Agents > Resource Zones

30
Chitta2019
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Aug 25 - Sep 1)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021463 - Password rotation failing - Functional account test fails with Error 53 - "The network path was not found". KB0022786 - Unable to view Workgroup from Smart Rule - Workgroup removed from Smart Rule KB0022804 - U-Series appliance Security Technical Implementation Guides (STIG) KB0022812 - After updating Appliance Management remote SQL server port get reset to port 1433 KB0022813 - How to setup Password Safe Mobile app KB0022814 - SQL memory shows 0% on appliance dashboard KB0022821 - ERRINFO_RPC_INITIATED_DISCONNECT_BY_USER KB0022823 - Unable to receive application audit events after upgrade KB0022826 - Failed to connect RDP session - NTSTATUS: STATUS_ACCOUNT_EXPIRED [0xC0000193] - ERRCONNECT_ACCOUNT_EXPIRED [0x00020019] KB0022830 - Unable to log in to Password Safe Mobile

50
GloriaB
BeyondTrust Employee
J
JasperVeteran
asked in General
RDS Server

Do we have any documentation about making use of RDS servers for Application Session Management?I am trying to figure out how do we scale up RDS servers, whether we add additional RDS servers later on or is it just increasing the CPU/RAM on the RDS VM itself? Do we need a redundant RDS server for multi site (we have a multi-site Active-Active setup with a load balancer so just checking if we also require this redundancy)?

221
H
BeyondTrust Employee
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - August - Password Safe
Monthly Buzz - August - Password Safe

Password Safe Cloud Instance Upgrade Requests and Scheduling In addition to customer-requested upgrades, older versions of Password Safe (PS) Cloud environments are scheduled by BeyondTrust to be upgraded to the latest version periodically. Notices regarding these upgrades are sent to the administrative contact for the PS Cloud instance leading up to the activity. This may vary, but typically, the initial notice is sent one month in advance, followed by a reminder two weeks later. Additional notifications are sent at the start of the upgrade and again upon its completion. If necessary, administrators can reschedule these upgrades to a more convenient time. It is recommended to have multiple administrators' contacts and keep the administrative contact information updated for notifications. These upgrades help ensure the instance is updated with the latest product enhancements and fixes to provide the best experience. Password Safe Cloud Instance Upgrade Requests and Scheduling In additi

30
B
Community Manager
Prudhvi Keertipati
Prudhvi KeertipatiGuru
asked in General
Password Safe Appliance Configuration Wizard Stuck

Hi All, Working on a VM appliance deployment and the configuration wizard stuck at the initial page for a very long time. Rebooted the server and it still the same, any logs I can check. Any help would be appreciated.  

305
J
tclowater
BeyondTrust Employee
tclowaterBeyondTrust Employee
posted in General
PasswordSafe: Secrets Safe Auditing

A question came up recently about understanding how Secrets Safe activity would be audited as access to the sessions aren’t requested the same as Managed Accounts. After creating some notes about creating a safe and the logs that occur with my activity, I’m sharing here if it’s helpful for anyone else. Note I’m testing on version 24.3.0.  Steps: I set up a safe with my admin creds, assigned it to a user group, and then booted my admin account out. I then logged in as my regular user, poked about, and added a super secret note. I show the logs of poking around adding items to secrets safe.  I then logged back in as my regular user, fetched  credentials. This shows the secret ID which is very useful for automation! Logging back in as my admin account, I show what that looks like in the logs as well, and what it looks like as an Admin accessing PasswordSafe. They don't, by default, see all safes, and it's clear which safes are user safes. As well, I show the screenshots of the reporting o

170
tclowater
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiGuru
asked in General
Vulnerability Scanning - Password Safe Appliance

Hello All,Third party agents are not allowed to install on the Appliance. How are you all scanning the Password Safe appliances for vulnerabilities? What are the BeyondTrust supported methods to scan the appliances for vulnerabilities.Please advise. Thank you

301
rhagerm
B
bt101Veteran
asked in General
PasswordSafe SSH Session - auto-login to sudo mode

Hello! Is there a way to achieve auto-login to sudo mode without  entering the password when logging in via PasswordSafe.I see there is a different workflow for login-account where commands & password are injected after SSH session is initiated e.g. Launch ssh session as login-account and then switch to root . Is there any way to configure PasswordSafe such that a managed-account logs in over SSH and a predefined sudo command is run , Passwordsafe injects the password for same account so that user doesn’t have to go back to browser where PasswordSafe is open , go back to open request or create one for password, copy the password, make sure they clicked inside SSH session, and then paste the password. I see an alternative is to allow sudo commands to run passwordless on managed systems. I think this is less secure approach than the above.  

130
B
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Aug 18 - Aug 25)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021394 - Upgrading from Appliance Management 4.0.x to 4.1.0 fails KB0022508 - How to get the pem version of the PS Coud certificate for configuring Secrets Cache KB0022689 - BT Updater does not detect the proper version of SUPI engine on R06 image KB0022783 - Unable to log in via SAML. Error "The configured webconsoleaccesspath: does not match the incoming request server name" KB0022798 - Appliance feature page is not reachable after upgrade

50
GloriaB
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiGuru
asked in General
Password Safe with BeyondInsight Installer Support?

Does anyone know whether the Password Safe with BeyondInsight installer version (not appliance image) is supported to use in the production environment? Thanks,

203
H
BeyondTrust Employee
P
prasadp87Trailblazer
asked in General
Manage AWS secrets using BeyondTrust

Hi Team,We have a new business requirement regarding the management of AWS secrets. We need to handle these secrets in AWS Secret Manager in conjunction with BeyondTrust. Do we have any document or any integration KBA that explains the process.Does ‘AWS Scan Target Collector’ helps in this? What is the purpose this connector?Looking forward to your input on this.Thanks,Prasad

614
P
H
HigorTrailblazer
asked in General
Analytics /Reporting / User Audits

Hi,when running Analytics /Reporting / User Audits, it brings me few information, but Details are empty: No Audit Details found.However, the most relevant information should be in this field, like account that was created/deleted and changed. Any idea?   

192
H
P
PatrickOApprentice
asked in General
Open several sessions for the one application

Hello, is it possible to open several sessions with the same account on the same system? We do have some admins, that need to be able to have have concurrent sessions on the same system. As can be seen in the following screenshot, we cannot access a system with another session if a session is already active.Thank you  

273
H
BeyondTrust Employee
R
rgkesselRising Star
asked in General
Lagging RDP session - Windows 11

Hello all, We are experiencing a behavior with RDP sessions via Password Safe initiated from machines with Windows 11.The session has a slow image loading, appearing to load in rows of images and in blocks.A simple movement of windows within the RDP session causes the image loading of this movement to be very slow.This does not occur if the RDP session is direct with the destination server.But if the connection is through Password Safe being Windows 11 > Resource Broker > Destination server, this slowness is noticed. Has anyone else noticed this problem in your environments? Additionally, this behavior does not occur in Windows 10.Points that I have already checked:- The software installed on the computers are the same between Windows 10 and 11;- The network settings are the same. This behavior occurs on both wireless and wired networks;- The GPOs of the Windows 10/11 stations, Resource Brokers and destination servers have already been checked. No Remote Desktop configurations th

57612
R
G
gsacuxipoApprentice
asked in General
Automate Password Management for Windows Local Scan Accounts and Use it as Scan Credential

Hello dear all,We want to make the Windows local scan accounts manageable by onboarding them into Password Safe using a Managed Account Smart Rule. However, for this to work, the local account must appear under the Advanced Details of the asset before it can be automatically onboarded.The issue is that, for some managed systems (MS) where we want to onboard the local scan account, these accounts do not show up in the asset’s Advanced Details.To resolve this, I understand that we need to perform a new scan on those systems using the previous local scan credential, so the system can retrieve and display the local account information. But this process is quite painful, especially considering there are over 30 managed systems, and we’d have to reconfigure all scheduled scans afterward to use the new Managed Account scan credential. As you know, you can’t change the scan credential to a managed account after the scan is created — it must be set during the initial scan setup.Do you have any

614
MikeK
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Aug 11 - Aug 18)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021186 - Cannot load backup options on SQLFree appliance KB0021196 - BeyondTrust EPM Event Collector Service log file missing when no logs are available KB0021378 - SAP HANA Database Managed Account password rotation fails with error "Invalid authorization. HanaException: authenticaiton failed" KB0021417 - One user unable to configure TOTP. MFA fails Authenticator code error: An authentication error has occurred. Try again. KB0021501 - Remote Desktop license issue warning for RDP session: "There is problem with your remote desktop license" KB0022335 - Are there any differences in reporting on PS Cloud vs On-Prem? KB0022739 - Functional Account test fails - Error 26: Error locating server/instance specified KB0022762 - Ticket System validation failed: Password change failed.: Resource Zone /defaultzone no

110
GloriaB
BeyondTrust Employee
F
Firdaus JamaluddinRising Star
asked in General
Active/Active Deployment - BeyondTrust Password Safe

Hi All, Im planning to design an active/active deployment for BeyondTrust Password Safe. If Im not mistaken, active/active deployment requires 3 UVMs and also an external SQL server with AOAG. I have a few questions that need clarification.During the configuration wizard for all 3 UVMs, should I tick “Enable services-Only High availability” for all 3 appliances? How about the features selection? That part is a bit confusing actually because there are a few feature selections and I don't know which ones I need to choose specifically for all those 3 UVMs.Appreciate all your advice on this, as Im new to exploring the active/active deployment for Password Safe. Thanks

593
F
H
HigorTrailblazer
asked in General
Unregister Resource Broker

Supposed I have two PS Cloud instance and I have a need to remove a Resource Broker from one tenant to connect to another tenant, is it just a matter to unregister it from the old tenant and register in it in new? Any additional consideration?

274
H
frank.colvin
frank.colvinVeteran
asked in General
SSH using Secure CRT, Winscp or sftp clients

we are rolling out linux/unix managed systems and we are having great success with putty, however our developers user Secure CRT, winscp and sftp clients. does anyone have any advice/guidance? 

1753
frank.colvin

Badge Earners

Show all badges
Terms & ConditionsCookie settings