BeyondInsight / Password Safe

Hi Team,  Please help me to find out the logs of the scheduled password change on UVM. Best Regards,Raja Sekhar L.

Hi everyone, hope you are doing well.Recently, we’ve been doing some testing and scratching our heads since its impossible to succeed.We’re attempting to connect to an Asset using Passwod Safe RDP session, but the PBSM log message shows as follows:#######################################################################2025/06/27 11:47:45.577 531988 523196 INFO: RDP Handler 531988 starting2025/06/27 11:47:45.592 531988 523196 WARNING: Could not open HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\SslBindingInfo\0.0.0.0:443 0x22025/06/27 11:47:45.592 531988 523196 INFO: Reading self signed cert2025/06/27 11:47:45.795 531988 534272 INFO: (RDP server) Client Security: NLA:1 TLS:1 RDP:02025/06/27 11:47:45.795 531988 534272 INFO: (RDP server) Server Security: NLA:0 TLS:1 RDP:02025/06/27 11:47:45.795 531988 534272 INFO: (RDP server) Negotiated Security: NLA:0 TLS:1 RDP:02025/06/27 11:47:45.858 531988 534272 INFO: (RDP serv

I would like to enquire about api’s that we have registered on password safe how do we report on the activity. Example of what we require .If we create a API for a service account for example that is used by postman how do we report on the usage of the api . The reason is is the api that is registered is not is use we want to clean up .

Hello, we have 2 U-series Appliances for HA. On the “Asset” section, Appliance1 was shown as “discovery scanner”. However, Appliance2 is not “Discovery Scanner”. When we swap the active appliance to Appliance2, all discovery jobs are failed. How could we add the Appliance2 to “Discovery Scanner”? Thanks,

Hi everyone,with a standard RDP connection, I can share and use my local drive in the connection.Is this also possible with a PWS connection, and can I set it as the default for certain connections?And what about applications that run on the RDP server? Some applications require data files that I would like to save or load. Regards Arno

Is there any way we can get the user license count from the password safe?We need to know how to check how many licenses are utilized. 

Hello,  Can PASM support backend database activity monitoring, including the ability to capture and log all database updates, including modifications made directly to the backend via SQL queries ? Is it capable of tracking and recording executed SQL code, with sufficient detail to identify the nature of the changes. The functionality does include filtering and reporting capabilities based on date ranges, enabling administrators to view SQL activity executed within a specified timeframe ?

I have a customer using 3x UVM2016 in A/A mode and want to upgrade to UVM2022 A/A.Problem is, their existing UVM2016 are all SQLFree. Now we want to move to 1x UVM2022 with SQL as primary + 2x UVM2022 SQLFree.What is the best practice to do the upgrade for all nodes? If i want to upgrade just primary appliance from UVM2016SF to UVM2022SQL, is it okay? Can i just level everything, add new node, config as primary, and turn off the old node? What will happen to existing session records? Can we bring them from old appliance to new appliance? Is there any other consideration? 

Hi Everyone, Anyone having issue with their workforce plugin after upgrading to BeyondInsight 25.1.0.1570?

Hello,Has anyone successfully configured RemoteApp access to Active Directory?I'm trying to publish the "Active Directory Users and Computers" tool as a Windows application, but I haven't had any luck so far.I assumed it would be straightforward, and I'm using the following application command:%SystemRoot%\system32\dsa.mscI suspect the issue is that it doesn't accept .msc file types and might require an .exe file instead.Any ideas or suggestions?

Hello, does PASM have JIT access ? Or should i take Entitle ?

Team, we deployed a new Password Safe install and just added a Linux server manually as the first managed system. When testing the fucntional account or rotating the managed account password, we are getting the error below: 2025-01-13 18:07:49.121 +00:00 [Debug] (23) (85f1e494-7492-4a55-9a66-9db07cb54c3e) api/ps/forms/functional-accounts/FormDefinition/PerformAction/{id} PerformAction -1-  An unexpected error has occurredBeyondTrust.Webconsole.ApiExceptions.BadRequestException: Verify Functional Account credentials action.Error: client credentials config not foundPlugin: Name=SSH, Id=22e4a4e1-3f85-4037-a567-a9b7a0d7179b, Version=3.8.1.0, Publisher=BeyondTrust   at BeyondTrust.WebConsole.PasswordSafe.Plugin.Services.Services.Forms.FunctionalAccount.BaseFunctionalAccountFormService.<>c__DisplayClass47_0.<AddCredentialSectionFields>b__8()   at BeyondTrust.BeyondInsight.WebConsole.Service.DynamicForm.Service.BaseFormService`2.Perf

Hi everyone - I wanted to raise awareness on a recent idea I submitted, and also open a discussion to see how/if any others are addressing this use case: Cloud / SaaS Proxy Capabilities | All Product Ideas - PublicPlease upvote the idea if you would find value in it. Also, I would love to hear how you have solved this. Tldr; if you want to inject a web-based credential into a managed session, how can you achieve this when the user is off-premises with no VPN (aka. resource broker access) capability? 

The following articles were published last week. New Knowledge Base Articles: KB0021329 - Is BeyondInsight Password Safe affected by CVE-2024-6387 regreSSHion? KB0021689 - Web application freezes or hangs and credentials are not entered when application is configured to use AutoIT Passthru KB0021929 - How to configure Managed Account DSS key rotation

Hi everyone,  Is there a possibility to display a custom link on the registered website at Password Safe, which points e.g. to a helpdesk page? We have documented all the steps in a portal. End users should read the documentation before opening a ticket. Regards

Hello All,I am looking for guidance for API script which used for password rotation of any managed account.We are currently using shell script for password rotation, but it seems failing for Invalid user/Password event though password fetch script is working fine for same user.If anyone has sample script, please share or if anyone knows pointer to develop new script for this requirement please help. Thanks,Prasad 

Hello, is PASM able to do this : The solution must support backend database activity monitoring, including the ability to capture and log all database updates, including modifications made directly to the backend via SQL queries. The solution must be capable of tracking and recording executed SQL code, with sufficient detail to identify the nature of the changes. The solution functionality must include filtering and reporting capabilities based on date ranges, enabling administrators to view SQL activity executed within a specified timeframe. Thank you.

Hello, how are you?Please, how can the option be configured to not open this box for the user? The idea would be to only use the extension for auto-filling as I can use with the administrator account.    

Hello, how are you?How do you enable the session time for password safe? The session time is extremely short.

Hello, how are you?I need support on how the features in password safe work. What would be the best practice recommendations for the solution and environment? Do you have any documentation? What to enable or not?

Hello, do you know if there is anything in the works to have managed account credentials also be updated in IIS > Management Service Delegation? 

Hello community,I have a question regarding our use of Password Safe. In our organization, we use Password Safe to access privileged SSH sessions. However, a question recently came up: since Password Safe is our only access method to managed Linux systems and credentials are never exposed to users, we're wondering how we could securely perform SCP or SFTP file transfers between two of our managed Linux systems.Has anyone encountered a similar scenario or found an effective approach for handling file transfers in a Password Safe-controlled environment?Any suggestions would be greatly appreciated.

How do I change the administrator password for the password safe console?

Hi Team, I’ve been trying to find the steps/process for onboarding of GCP, Azure and AWS assets. I’ve seen KBA for onboarding of accounts only from these cloud platforms. Regards,Aditya Bhatia

The following articles were published last week. New Knowledge Base Articles: KB0021685 - How to link Active Directory Managed Account to Managed System KB0022470 - Run Unix Shell Script Propagation Action does not work on managed system with custom port KB0022481 - Resource Brokers not properly load balancing session requests