Skip to main content

BeyondInsight / Password Safe

Manage privileged passwords, accounts, keys, secrets, and sessions for people and machines and secure non-privileged employee passwords for business applications.

279 Topics
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - June - Password Safe

Discover What's New in Password Safe 25.1 Workforce Passwords for PathfinderWith Password Safe 25.1, Workforce Passwords is fully compatible with Pathfinder! Previously, the extension didn’t work when customers were activated in Pathfinder. Now, everything runs as expected. Plus, there’s a great new feature on the login screen: a handy dropdown menu that lets you choose your login portal. Simply select Pathfinder to sign in via beyondtrust.io, then enter your Pathfinder credentials to access your Workforce Passwords secrets with ease. Mobile Application Session Timeout SettingIn Password Safe Cloud and on-prem, you’re in control - configure the Mobile app to auto-timeout after a set number of minutes! Deployable WFP ExtensionWorkforce Passwords makes it easy and secure to store and access business credentials right from your browser. And now with Password Safe 25.1, deploying the WFP browser extension is smoother than ever! Admins can effortlessly roll out the extension across Chrome,

310
B
Community Manager
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - May - Password Safe

Azure Key Vault - Password Safe Custom Plugin While there is a Platform Plugin for Azure AD /Entra ID out-of-the-box, it is used for managing Entra ID Users passwords.  We have seen demand over the years for the capability to manage Azure Key Vault credentials. The Plugin covered in this guide includes support for managing Secrets.  Capabilities  Change Managed Account Credentials using Functional Account Change Functional Account Credentials Verify Managed Account Credentials Verify Functional Account Credentials Discover Accounts The Password Safe Resource Kit includes a SDK for developing Custom Plugins. The SDK comes with a Sample Plugin example, which has been used to create this Custom Plugin example to allow for the rotation of Secrets in Azure Key Vault. Read more here Latest Available Version:Password Safe 24.3– December 2024 Beekeepers Hot Topics PasswordSafe/ WebConsole login  “Hi Team,I have a query regarding web console login: "Can we use the same user account for

410
B
Community Manager
I
immi563Apprentice
posted in General
dedicated account mapping for local accounts

Hi AllI am facing one issue in mapping dedicated account for ids on local dmz servers. admin id and users standard ids are not matching. in such case how should use the dedicated account mapping functionality?Below is data set-up 1. admin id on managed system is PAO123452. standard id of this user in user group is MSS12345Now since admin id is local i cannot use directory attribute.  in mapping Smart rule i think we cannot use map dedicated account to action with deciated account filter. Kindly help me how can i write the smart rule to map the deciated ids . I don't want to use one-to-one mapping as it will require to write lot of smart rule and lot of user group. Please help

696
I
I
immi563Apprentice
asked in General
Bulk smartrules creation

Hi Everyone I have one requirement wherein Admin and Standard ids are not matching for local dmz servers. Hence i need to do one to one mapping. I have around 400 admin ids and hence i am required to create 400 smart rules.I have checked all the options and dedicated mapping is not possible since account is local and admin and Standard are not matching. I wanted to check is there any API available that i can use to create the Smart rules in bulk using Postman or powershell utility?Awaiting response. thanks in advance  Regards Imran Aliyani

20
I
H
HigorTrailblazer
asked in General
Change location of PuTTY for Password Safe Cloud

Hi, is there a way to change PuTTY from C:\Program Files\PuTTY\putty.exe to C:\PuTTY\putty.exe as my Default Launch path? 

152
H
R
rgkesselRising Star
posted in General
PSafe seems to not execute the pwdadm -c/-f NOCHECK command on AIX Servers

Hello everyone,We're experiencing a situation in our environment where PSafe appears to be failing to execute or executing pwdadm commands incorrectly on AIX servers.At the beginning of the operation, we noticed that all credentials for which PSafe rotated the password were prompted by the user for a new password change.This is due to AIX adding the ADMCHG flag to the credential after the password is rotated.To avoid this, the original password rotation workflow included the command pwdadm -f NOCHECK <<ManAcctName>>.Even with this command in the workflow, the credential remained with ADMCHG and the NOCHECK flag was not added.So, we changed the command to pwdadm -c <<ManAcctName>> and added two more consecutive executions.After this change, the password rotations no longer prompted the user to change the password at the next login, and the ADMCHG flag was removed.However, an AIX server in our environment doesn't log the execution of pwdadm -c even after three con

793
R
S
Sathiya.KNewcomer
posted in General
Request for AAA Server Onboarding Requirements for BeyondTrust PAM

Hi,I would like to understand the process for onboarding an AAA server into BeyondTrust PAM. Could you please confirm whether this is supported, and if so, share the necessary steps or prerequisites for onboarding? Regards, M.Sathiya

101
J
BeyondTrust Employee
T
tmontagueRising Star
asked in General
Automatically linking multiple managed accounts to managed systems based on services

I’m trying to figure out if this is even possible.  I feel like it is, but I’m probably missing how to accomplish it.So we have 60 something Windows servers running SQL server.  We have 20 something AD accounts that run SQL on these various servers.  Ideally what I’d like to do is build a rule that adds the appropriate linked managed system to each managed account that is running the SQL services on those systems. So the end result would be I could go into each account, and see the system or systems that it is running SQL on.I’d really like this to work automatically so that any time a new server is added, or an account is added to another system, it automatically gets added to the list of linked systems for that account.    I can easily create rules to get a list of all of these servers running sql.  I can also easily create a rule that shows me all of these accounts (they all start with the same thing).  But is there a way to then just link each account to the appropriate server with

7210
rhagerm
B
bt101Veteran
asked in General
PasswordSafe Discovery Scan returns IP instead of hostname

Hello, we have BI PasswordSafe on-prem . When we do IP Discovery scan against 50+ network devices for some of the devices , IP address is added as an Asset after the scan, instead of hostname , I think IP Discovery scan would just query the DNS and add the hostname as an asset along with IP address as details for that asset. All devices have similar DNS entries (hostname : IP ). But for some devices the scan add hostname as an asset - which is the desired outcome , but for others IP address is added as asset

463
H
P
prasadp87Trailblazer
asked in General
Failover Process for Active Passive Setup

Hello Everyone,We have a setup of Active -Passive environment for Beyond Trust.We are planning to test Failover for these environments. I am looking for any pointers or document about stepwise process to conduct this failover and process to fail back. Thanks,Prasad

141
H
BeyondTrust Employee
H
HigorTrailblazer
asked in General
Permission to SAML group

Hi, I am trying delegate the following permission to SAML group but nothing happens with end user permission. Is there a reason for that?Analytics and ReportingLicense ReportingUser Audits Higor

121
rhagerm
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Jul 14 - Jul 21)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021393 - PMM Login explanation seen in Users Audits KB0022464 - How to upgrade Appliance Management using BT Updater KB0022658 - RDP to U-Series Appliance fails. Error - Remote Desktop can't connect to the remote computer Error code: 0x204 KB0022662 - Enhanced Session Utility 24.3.16 install fails on Windows Server 2025 KB0022664 - LDAP Query error - A server error occurred. Unable to test this query. KB0022665 - ServiceNow Integration -Password Safe Cloud plugin version v25.1.3 shows "none found" for account dropdown KB0022681 - HA setup fails error : "The certificate, asymmetric key, or private key file is not valid or does not exist; or you do not have permission for it" KB0022687 - EPM-M client not communicating with BI after successful install KB0022689 - BT Updater does not detect the pr

100
GloriaB
BeyondTrust Employee
X
xNourahxApprentice
asked in General
Unauthorized RDP Sessions via Resource Brokers

We have discovered that some users are initiating RDP sessions from inside Password Safe Resource Brokers to other internal servers. Please advise on recommended configuration, policy settings, or network restrictions to prevent this behavior.

271
Prudhvi Keertipati
P
prasadp87Trailblazer
asked in General
Email notifications for Password change and next password change date

Hello,We have the following use case related to email notification - Notify certain email IDs with message about password is rotated in password safe. Notify certain email IDs about next password change date.I have seen below KBA article for email notification- BeyondInsight / Password Safe - How to add, change or remove email notificationsDoes ‘release notifications for Managed Accounts’ help with above requirements.I would like to understand the feasibility on these email notifications. Thanks,Prasad

163
H
BeyondTrust Employee
N
Nagapriya JRising Star
asked in General
Import Secrets in Secret Safe

The notes is not getting imported while i am importing the secrets

2995
R
H
HigorTrailblazer
posted in General
Dedicated Accounts - Best Practice

Hi, I have a use case in place that works fine using Dedicated Account feature, but it covers only 25 accounts. Now my customer wants to expand this for around 5,000 users. Have you guys seen a use case with 3,000 - 5,000 Dedicated Accounts in Password Safe? Does it work fine or I should consider anything.

165
H
H
HigorTrailblazer
asked in General
Is there any documentation or guide to help users to use Copy and Past file in Linux system?

Is there any documentation or guide to help users to use Copy and Past file in Linux system?

103
MikeK
H
HigorTrailblazer
asked in General
license assigned to my Password Safe Cloud

Is there a way to check the number of license assigned to my Password Safe Cloud by UI?

315
MikeK
H
HigorTrailblazer
asked in General
FA Linux Server

I have 300 Linux servers and need to onboard them as a managed system. What would be the best practice in terms of Functional Account? ONE FA to all Linux server or one FA to each linux server? They are all local accounts.

252
H
H
HigorTrailblazer
asked in General
Unregister Resource Broker

Supposed I have two PS Cloud instance and I have a need to remove a Resource Broker from one tenant to connect to another tenant, is it just a matter to unregister it from the old tenant and register in it in new? Any additional consideration?

153
H
H
HigorTrailblazer
asked in General
SAML Account removed from Administrator

Hi, for any reason may saml account is removed from local Administrators group from Password Safe Cloud. Is there any reason

267
H
B
bt101Veteran
asked in General
Passwordsafe - Group and Features logic - User in multiple groups

Hello! If the a user is part of two Security Groups and each group has different features enabled (under Configuration > User management > Groups >     Group-Name - Features. Will the user get all the enabled features or only one of the Groups will take preference.

93
rhagerm
P
prakash.rRising Star
asked in General
How to enable "Automatic Password Change" for local Linux servers?

Hi all,I’m in the process of onboarding over 100 local Linux servers into BeyondTrust Password Safe, and I’m looking for a more efficient way to handle FA (Functional Account) assignment during setup.Steps I’ve taken so far: Added all 100+ servers to an Address Group Created an asset-based Smart Rule Set the assets within the Smart Rule to be Managed by Password Safe However, when I try to enable Automatic Password Change Options, I’m only able to assign one FA (From smart rule). Since each server requires a unique FA, manually creating individual Smart Rules for each server would be highly inefficient.Question:Is there a way to automate or bulk assign one FA per server without having to create a separate Smart Rule for each one?Thanks in advance for your help!

11211
Paul Dann
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiGuru
asked in General
Delete the Completed Session Recordings when no longer needed (after x days)

Hi everyone,Is it possible to delete the completed session recordings after x days when no longer needed for auditing?For example, some clients have to maintain the records for a maximum of 1yr for auditing, after that logs/records can be deleted.I know there is no option in Password Safe console, Looking for backend alternative methods.

273
MikeK
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Jul 7 - Jul 14)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0020179 - Error "Secrets Safe unavailable An error occurred when attempting to communicate with the Secrets Safe service Please contact your administrator to resolve" KB0021724 - How to use psrun command KB0021774 - BeyondTrust Discovery tool teste error 400: BadRequest KB0021913 - Resource Broker installation error: Install validation failed. Error details: Failed to validate resource broker limit. Status code Unauthorized. KB0022634 - No data shows after generating a report KB0022651 - How to install the Resource Broker via command line

70
GloriaB
BeyondTrust Employee

Badge Earners

Show all badges
Terms & ConditionsCookie settings