Skip to main content

Events
Groups
BeyondTrust University
Support Portal
Ideas Portal (Aha!)
BeyondTrust.com

Why BeeKeepers?

4 months ago

Home
Community
BeyondInsight / Password Safe

BeyondInsight / Password Safe

Manage privileged passwords, accounts, keys, secrets, and sessions for people and machines and secure non-privileged employee passwords for business applications.

93 Topics

xNourahxApprentice

asked in General

cisco catalyst switches and Routers

We are planning to onboard all Cisco Catalyst switches and routers into PAM and manage the associated local accounts.Previously, I only onboarded Windows servers, so onboarding Cisco devices is new for me, and I’m unsure where to start.Do I need to create a functional account on all devices to perform detailed discovery? and what is after that? Any insights or recommendations would be greatly appreciated.Thank you.

Salman1Newcomer

asked in General

RDP and SSH same system, Password Safe

Hello all! I am trying to configure a use case which is to connect with SSH and RDP to the same Windows system through Password Safe. I have gone and tried testing this but it seems to be that Password Safe only supports 1 protocol and not 2 at the same time as even configuring duplicates in Password Safe makes it stick with whichever came first.Is this possible?

Prudhvi KeertipatiVeteran

asked in General

BeyondTrust Docs

Looks like BeyondTrust Docs is migrated to a new document hosting solution and it is missing some of the documentation when compare to earlier documentation. For example: Database Scan Account Creation, scan and functional account required permissions for Linux/Unix assets

SayaliApprentice

asked in General

Windows 11 2024 version 24H2 update RDP graphics issue

Customer recently updated Windows 11 version from 23h2 to 24h2. After the update, single user is facing an RDP graphics issue. As per the KB article for cloud password safe https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0021625, we have to make gfx registry changes.but for other users its working fine. As it's a global setting for all users, if we make the changes, does it disturb the RDP launch for the other user??

Eric WApprentice

asked in General

Frequent domain account lockouts on Windows systems. Fast Startup?

We implemented Password Safe for our dedicated domain admin accounts in May/2024. At the time, we experienced some frequent lockout issues with these accounts, but nothing that couldn’t be explained or resolved by simple process changes for users (i.e. forgetting to sign out of systems before the password release expires). In Sept/2024, we saw an uptick in lockout frequency with these accounts that couldn’t be explained. Most of the lockout events occurred on the Windows machines users were in possession of rather than from accessing a remote VM like we saw in the past, (aside from some of our support staff who encountered lockouts from end user machines they had previously worked with and used their credentials to establish a remote support session via Teamviewer). Lockouts occur multiple times a day regardless of a reboot on the problem device. No processes are found running with dedicated admin account on the machine, yet ongoing lockout events on the account continue to register fr

frank.colvinTrailblazer

asked in General

session request information

We have several issues, and resolving them would be very easy if we can get information from the users session request, specifically duration. we have turned off ESA and log off on disconnect due to business use requirements so if a user does not sign out of an RDO session properly the privileged account will become locked after password safe does a post release password reset. in the most recent case the user is getting locked out and we find this through a daily lockout report from our SEIM. the user is notified and claps back that she has not been on the machine in days. in researching we see she accessed this sever and failed to logout properly 7 days earlier. we assume the user requested this session for 7 days, however the user does not remember. we would like to address this but with no solid evidence we cannot do that. any suggestions?

naidu_jstsApprentice

asked in General

Session should be enabled by default in BT passwordsafe

How to ensure that even Admin session should be recorded. There should not be an option to avoid Recording.

naidu_jstsApprentice

asked in General

How to Control Concurrent session to BT Console (passwordsafe) not referrring to managed accounts

How to Control Concurrent logins to Beyondtrust Passwordsafe? Example: If a user is trying to login using his laptop to bt passwordsafe console and if goes and logs in to another machine that should logout the other session and making this active session. Can we do this in BT passwordsafe?

kgujasApprentice

asked in General

BI Password Safe networking

Password safe physical appliane comes with 4 network cards. It is possible to have more than one network card in virtual appliance? Can we have more IP adressess for one network card in virtual appliance? If yes, where can I found the documentation? Thanks.

alexsilvabunkerApprentice

asked in General

Error when testing the functional account or rotating the passwords

Team, we deployed a new Password Safe install and just added a Linux server manually as the first managed system. When testing the fucntional account or rotating the managed account password, we are getting the error below: 2025-01-13 18:07:49.121 +00:00 [Debug] (23) (85f1e494-7492-4a55-9a66-9db07cb54c3e) api/ps/forms/functional-accounts/FormDefinition/PerformAction/{id} PerformAction -1- An unexpected error has occurredBeyondTrust.Webconsole.ApiExceptions.BadRequestException: Verify Functional Account credentials action.Error: client credentials config not foundPlugin: Name=SSH, Id=22e4a4e1-3f85-4037-a567-a9b7a0d7179b, Version=3.8.1.0, Publisher=BeyondTrust at BeyondTrust.WebConsole.PasswordSafe.Plugin.Services.Services.Forms.FunctionalAccount.BaseFunctionalAccountFormService.<>c__DisplayClass47_0.<AddCredentialSectionFields>b__8() at BeyondTrust.BeyondInsight.WebConsole.Service.DynamicForm.Service.BaseFormService`2.PerformAction(FormDefinition formDefinition, String

Prudhvi KeertipatiVeteran

asked in General

Break-Glass Scenario Best Practices for Password Safe Cloud

Hi Team,I’m looking for a best practices and BeyondTrust recommendations for break-glass scenarios in the Password Safe Cloud? Please share your suggestions/advice?-Prudhvi

AmilaKApprentice

asked in General

How to map non-shared manage accounts to User Group

Hi Guys, How can we achieve below use case ?"There are four members in the firewall team have their own manage accounts(Non-AD Accounts). Customer want to create one user group to grouping these members. When one member login to the PAM ,he should be able to view hist credential/manage account only."

GloriaBBeyondTrust Employee

published in General

BeyondInsight / Password Safe - Knowledge Article Publications (Jan 6 - Jan 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021872 - Secrets Cache pspca logs error "A timeout occurred" KB0021909 - What AD permissions should a bind account or directory credential have? KB0021912 - Unable to SSH to Cisco switches version ISO 17.12 or higher within Password Safe . Error: SSH client: No Matching MAC algorithm found KB0021926 - How to onboard VMware Vsphere ESXi SSH into Password Safe KB0021932 - When using PS_automate version 24.3, launching web application with the Microsoft Edge Browser fails. KB0021935 - What is the difference between the Change Password menu option and the Schedule Change button on the Managed Accounts page?

mitesh.nanduApprentice

asked in General

Password Safe || Nutanix OVA

We are uploaded OVA file in Nutanix Platform via Prism Console, post booting VM we are getting Boot device not found. Please install an operating system, or play 2048.We kept disk as a first boot, still we are getting same error message while booting VM.Package Name: 2024-R06-Win22-Ntnx-SF.ovaNutanix Version: 6.5.3.6 LTS Has anyone has done Password Safe deployment on Nutanix Platform.

Cygnus-x1Rising Star

asked in General

Cloning U-Series Appliance

Hi,We have 2 U-Series Virtual Appliances in Active/Active mode with an external SQL Server database.Our cybersecurity team needs to have a clone of our BeyondTrust setup. Is it possible to clone and have a working setup while also running the actual setup?What will be the major challenges/obstacles to overcome?Would highly appreciate any help/guidance.Thanks

RahulBApprentice

asked in General

How to manage local scan account and functional account step by step

Hello Everyone, I can understand the logic behind the automatic password rotation of local functional account even if we have new server onboarded using same first functional account credentials, but it is untested. i am trying to test it and update it once done. Regarding the Local scan account i actually do not have any idea that how can we manage it (Using enable scanner on managed account i know but what if we have onboarded 100 servers and now we need to scan 100 more and the scan account is using old credentials on remaining 100 servers also if i need to perform the scanning on old scanned assets?)There are lots of questions in my mind regarding the management of local scan accounts.Please feel free everyone to share your recommendations………………………….

GloriaBBeyondTrust Employee

published in General

BeyondInsight / Password Safe - Knowledge Article Publications (Dec 23 - Dec 30)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021262 - Report in CVF format has offset columns - Columns are misaligned for records KB0021741 - Can Password Safe rotate Google Workspace Managed Accounts? KB0021829 - How to integrate Google Cloud Platform (GCP) and onboard accounts into Password Safe version 24.3 KB0021853 - Deploying a SQL free or SQL-less U-Series appliance shows duplicate names for Session Agent and password changes not occurring KB0021884 - BeyondInsight Password Safe Licensing FAQs

bpkothariNewcomer

asked in General

Prevention of sensitive info ON Workforce Password Manager UI

On user interface there are many fields which allows users to enter clear text info. We have seen users adding passwords, secrets, credentials entering these fields which also get stored as clear text in DB. We want to stop / prevent users submitting such info from UI. 1) How do we configure / control this? 2) How do we change label of such fields to warn users not to enter such info 3) How do we add a custom banner to warn / alert users not to enter sensitive info anywhere in WPM / Secret Safe / Password Safe? We were able to add similar banner in ERPM PI. We need such customization for Password Safe / WPM and Secret Safe.

bpkothariNewcomer

asked in General

Migration of Personal Vault from ERPM PI to Workforce Password

We are moving from ERPM PI to Workforce Password Manager (24.2.1.104). To have easy adoption of WPM, its important for us to provide some migration utility from PI to WPM during initial setup. It will be really bad for us to go back to end users telling we are moving to new product and now you migrate your own accounts to new product after using ERPM PI for years. What are the various options (partial or full migration). We need this to plan adoption strategies.

GloriaBBeyondTrust Employee

published in General

BeyondInsight / Password Safe - Knowledge Article Publications (Dec 16 - Dec 23)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021462 - Error: Password Safe does not support WinSCP client using the SCP protocol. Try again using SFTP protocol" and the connection does not proceed KB0021722 - Auto Shrink setting creating database locks affecting performance KB0021806 - High availability fails after upgrade "Process stopped due to error. The remote server returned an error: (500) Internal Server Error" KB0021827 - Users are not able to ssh from Password Safe with AD account when using Centrify SSHD service KB0021846 - Onboarding Managed Accounts or Assets via a Smart Rule issue - Disassociation from DC when directory query is used KB0021849 - Error "An error was reported. Please contact an administrator if the issue persists" when running reports KB0021851 - Unable to upload SSL Certificate: "Error occurred while importing SSL Certificate"

prakash.rApprentice

asked in General

Is there a database for BeyondTrust Password Safe latest Vulnerabilities?

Hi there,I'm trying to get the latest vulnerabilities for BeyondTrust Password Safe (PS). I found this link: https://www.beyondtrust.com/trust-center/security-advisories, but the last advisory for Password Safe seems to be almost six months old.Is there a database or mailing list/RSS feed that provides more up-to-date vulnerability information for this solution?

Cygnus-x1Rising Star

asked in General

Assign Access Policy to a Specific Application

Hi,How can I assign an Access Policy to a specific application only?Thanks

Varuns29Apprentice

asked in General

Password Safe Cloud RDS Server Architecture & Port Requirements

Hello Guys, I’m new to BeyondTrust world but have fair understanding of PAM architecture.I’m trying to understand the RDS server role in the Password Safe Cloud architecture. The current architecture shared by BT emphasises on Resource Broker and thats where I have clear understanding of Resource Broker from application & network perspective. However, RDS Server is not covered in detailed in any document or article. I only understand that RDS Server is required for session management for non RDS/SSH connections. But, where does it fit in the architecture?I assume the flow of Database session management may look like:End user Workstation -→ Resource Broker (TCP/4489) -→ RDS Server (TCP/3389) --→ Database (e.g. TCP 1521/1433) I’m keen to understand below points with respect to RDS Server:Network requirements for RDS Server. Does it connect to any other component (PS Cloud) except Resource Broker & target system (DB etc.) Does RDS Server store the session recording temporarily?

rimeda201Apprentice

asked in General

RDS Error on application

Hello, i’ve created an application via Remote Desktop Services using AutoIT that use $CmdLine[1] and $CmdLine[2] for user and password, when will execute on CMD with “C:/locate.exe user password” work’it, but, execute direct with double click appear the message “Array variable has incorrect number of subscripts or subscript dimension range exceeded” and same thing happen when i execute within Password Safe… whats happen? Theoretically, Password Vault will enter the user and password automatically...

GloriaBBeyondTrust Employee

published in General

BeyondInsight / Password Safe - Knowledge Article Publications (Dec 9 - Dec 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021692 - Can TOTP be used with WinSCP Direct Connect? KB0021699 - Unable to delete Address Group error KB0021708 - Webconsole redirect issue after upgrading to 4.2.1 Appliance Management - repair attempt fails with Fatal Error during Installation KB0021829 - How to integrate Google Cloud Platform (GCP) and onboard accounts into Password Safe version 24.3 KB0021832 - How to confirm if DNS name or IP address is being used for password management. KB0021838 - How to manage Smart Rule permissions using the Smart Rule Management feature

1
2
3
4

Page 1 / 4

Badge Earners

Kragballehas earned the badge BCSE: Privileged Remote Access
kgujashas earned the badge BCA: Password Safe
kgujashas earned the badge BCIE: Password Safe
Vinoth Rajahas earned the badge BCIE: Password Safe
Pablo Salashas earned the badge BCA: Remote Support

Show all badges

Powered by Gainsight

Terms & Conditions Cookie settings

Sign up

Already have an account? Login

Login with the BeyondTrust Identity Service

Login to the community

Login with the BeyondTrust Identity Service

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK