Skip to main content

BeyondInsight / Password Safe

Manage privileged passwords, accounts, keys, secrets, and sessions for people and machines and secure non-privileged employee passwords for business applications.

276 Topics
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Password Safe Appliance - Oracle Cloud Infrastructure (OCI)

Has any one deployed BeyondInsight Password Safe Appliance on Oracle Cloud Infrastructure (OCI)? If yes, which appliance image was used?  Is deploying the appliance on OCI supported by BeyondTrust?

271
H
BeyondTrust Employee
P
prakash.rRising Star
asked in General
Caching Issue with Web Applications via Password Safe and Microsoft Remote Desktop on MacOS

Hi,{This issue is only applicable to MacOS environments}Is anyone facing an issue where, when launching a web application (using PSautomate) via Password Safe in MacOS using the Microsoft Remote Desktop application, there is some sort of caching issue? For example, let’s say I download the RDP file for a web application at "https://app1.example.com"; the Microsoft Remote Desktop will prompt an “RDP certificate warning,” and the user will click "Continue," allowing the browser and web application to launch successfully. Example of “RDP Certificate Warning” However, once they close this web application browser (browser only and not the entire Microsoft remote desktop app) and launch another web application session (such as "https://app2.example.com") using a new RDP file downloaded from the Password Safe portal, it doesn’t prompt the “RDP certificate warning” and instead launches the old web application ("https://app1.example.com") session instead of the new one, even though we clearly l

301
J
BeyondTrust Employee
S
SFATrailblazer
asked in General
Anyone know what is this error related to when doing custom platform plugin?

Anyone know what is this error related to when doing custom platform plugin?    

193
S
S
SFATrailblazer
asked in General
how to run powershellscript to change password

Hi I have application API to change password , how can I use it to trigger password change via PAM. For using application host, I am unable to use WINDOWS system . I found this link here-Resource Kit SDK Plugin for PowerShell Scripts -Should I go with above? or propagation action? If using propagation action, what needs to be the platform? I mainly want to do trigger generation of password based of password policy, update it just in the BT DB and not try to apply in system account. I have a windows system with the script and want to trigger change of password from BT .  

705
Prudhvi Keertipati
A
AmilaKRising Star
posted in General
RDS CAL Licenses for Application Sessions

Hi Guys,How can we calculate RDS user CAL licenses for below use case for password safe.One PAM user (requestor) is having concurrent 3 applications with one functional account.Do we required 3 RDS CAL licenses or 1 RDS CAL license ?    

2796
J
BeyondTrust Employee
B
bt101Veteran
asked in General
Password Safe onboarding and rotating Linux local accounts

Hello,  We have Linux desktops which have non-root account which is in sudoers. This account has a common password while imaging which gets rotated every n days outside Passwordsafe (PS)I see that we need a functional account that has ability to rotate other local accounts , which should be used to onboard these accounts to Passwordsafe. As this non-root account has a fixed initial password for each newly imaged desktop , can we use it as a Functional account in PasswordSafe and check the option “ Use Own Credentials” to Manage/Rotate password in smart rule. I am assuming that this will work as initial password of non-root account will be used by PS to onboard the account and then it will change its own password when smart rule is processed. Is my understanding correct ? am I missing anything that could result in any issues

271
Paulo144
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
BeyondInsight / Password Safe Cloud - Smart Card Authentication

Hello everyone. Need your inputs with enabling the Smart Card Authentication in Password Safe Cloud. I have configured it as below.when I try to access the url http://hostname.ps.beyondtrustcloud.com/RetinaCSSC and I’m getting 403 - Forbidden error.   

101
Paulo144
A
AyanWSTrailblazer
asked in General
Extended RDP session - 2-4 days

Team,I am curious to know whether it’s possible to extend/allow RDP session for more than 2 days. Concern team wants to perform a job and they might need to keep the session active for about 2 days at least. Is it something we can leverage from BI console? Please suggest.

712
A
A
Anil ReddyApprentice
asked in General
virtual appliance deployment on vm for passwordsafe on prem

HI All, Planning to configure on prem virtual appliance on VM new server to deploy the BI and passwordsafe.Can you share any one the article to start the deployment step onwords ,how we can go head to complete this new setup for testing purpose we are planning to deploy only one appliance. Thanks 

414
Prudhvi Keertipati
P
prasadp87Trailblazer
asked in General
Can NTLM be disabled for Beyond Trust.

Hello Team,  We have received a requirement from our security team to disable NTLM for Beyond Trust. We are using Beyond Insight Password safe and U series appliance.I have seen few of the topic which discuss about same but not sure if we still can disable NTLM and it won't break anything.  Some of the reference topics are -Endpoint Privilege Management - Can EPM policy be configured to deactivate NTLM ?BeyondInsight / Password Safe - NTLM is being deprecated; can it be removed from U-Series appliances? Please suggest. Thanks,Prasad 

1255
P
R
Raja SekharApprentice
asked in General
where to find scheduled password change logs

Hi Team,  Please help me to find out the logs of the scheduled password change on UVM. Best Regards,Raja Sekhar L.

2853
B
N
NectarNinjaApprentice
asked in General
RDP Failed Tested pretty much everything...

Hi everyone, hope you are doing well.Recently, we’ve been doing some testing and scratching our heads since its impossible to succeed.We’re attempting to connect to an Asset using Passwod Safe RDP session, but the PBSM log message shows as follows:#######################################################################2025/06/27 11:47:45.577 531988 523196 INFO: RDP Handler 531988 starting2025/06/27 11:47:45.592 531988 523196 WARNING: Could not open HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\SslBindingInfo\0.0.0.0:443 0x22025/06/27 11:47:45.592 531988 523196 INFO: Reading self signed cert2025/06/27 11:47:45.795 531988 534272 INFO: (RDP server) Client Security: NLA:1 TLS:1 RDP:02025/06/27 11:47:45.795 531988 534272 INFO: (RDP server) Server Security: NLA:0 TLS:1 RDP:02025/06/27 11:47:45.795 531988 534272 INFO: (RDP server) Negotiated Security: NLA:0 TLS:1 RDP:02025/06/27 11:47:45.858 531988 534272 INFO: (RDP server) Accepted client: CVLP-JPALACIN2025/06/27 11:47:45.858 531988

444
Paulo144
R
RidwaanKApprentice
asked in General
Registered API usage reporting

I would like to enquire about api’s that we have registered on password safe how do we report on the activity. Example of what we require .If we create a API for a service account for example that is used by postman how do we report on the usage of the api . The reason is is the api that is registered is not is use we want to clean up .

163
H
BeyondTrust Employee
A
AndyHTrailblazer
asked in General
How to add a discovery scanner?p

Hello, we have 2 U-series Appliances for HA. On the “Asset” section, Appliance1 was shown as “discovery scanner”. However, Appliance2 is not “Discovery Scanner”. When we swap the active appliance to Appliance2, all discovery jobs are failed. How could we add the Appliance2 to “Discovery Scanner”? Thanks,

232
A
Arno
ArnoApprentice
asked in General
Local Drives in a RDS-Connection

Hi everyone,with a standard RDP connection, I can share and use my local drive in the connection.Is this also possible with a PWS connection, and can I set it as the default for certain connections?And what about applications that run on the RDP server? Some applications require data files that I would like to save or load. Regards Arno

171
Paulo144
S
suhail.salimNewcomer
asked in General
Password safe user license details

Is there any way we can get the user license count from the password safe?We need to know how to check how many licenses are utilized. 

3445
Chitta2019
K
Kevin MUApprentice
asked in General
PASM capabilities

Hello,  Can PASM support backend database activity monitoring, including the ability to capture and log all database updates, including modifications made directly to the backend via SQL queries ? Is it capable of tracking and recording executed SQL code, with sufficient detail to identify the nature of the changes. The functionality does include filtering and reporting capabilities based on date ranges, enabling administrators to view SQL activity executed within a specified timeframe ?

261
Q
BeyondTrust Employee
raymondus
raymondusApprentice
asked in General
How to upgrade UVM 2016 to UVM 2022 in A/A site

I have a customer using 3x UVM2016 in A/A mode and want to upgrade to UVM2022 A/A.Problem is, their existing UVM2016 are all SQLFree. Now we want to move to 1x UVM2022 with SQL as primary + 2x UVM2022 SQLFree.What is the best practice to do the upgrade for all nodes? If i want to upgrade just primary appliance from UVM2016SF to UVM2022SQL, is it okay? Can i just level everything, add new node, config as primary, and turn off the old node? What will happen to existing session records? Can we bring them from old appliance to new appliance? Is there any other consideration? 

1375
raymondus
Paulo144
Paulo144Veteran
asked in General
BI 25.1 - 405 method not allowed

Anyone else after updating to BI 25.1 is getting 405 when trying to edit/delete any item of Configuration? I Tried to edit a Api Registration and got 405, tried to delete a acess policy got 405, tried to enable Pre-Login banner, got the 405.I even applied the lastest hotfix for 25.1, but the problem continues, any other menu like managed sytem, assets the delete and put method works just fine. Just want to know if its a me problem or if anyone else saw the same before opening a case.Example:  

371
tclowater
BeyondTrust Employee
M
mcencienzoRising Star
posted in General
Unable to login to Password Safe Workforce after upgrading to v25.1.0.1570

Hi Everyone, Anyone having issue with their workforce plugin after upgrading to BeyondInsight 25.1.0.1570?

221
tclowater
BeyondTrust Employee
X
xNourahxApprentice
asked in General
Active Directory windows app

Hello,Has anyone successfully configured RemoteApp access to Active Directory?I'm trying to publish the "Active Directory Users and Computers" tool as a Windows application, but I haven't had any luck so far.I assumed it would be straightforward, and I'm using the following application command:%SystemRoot%\system32\dsa.mscI suspect the issue is that it doesn't accept .msc file types and might require an .exe file instead.Any ideas or suggestions?

1213
rhagerm
K
Kevin MUApprentice
asked in General
JIT access

Hello, does PASM have JIT access ? Or should i take Entitle ?

471
josegarza
A
alexsilvabunkerApprentice
asked in General
Error when testing the functional account or rotating the passwords

Team, we deployed a new Password Safe install and just added a Linux server manually as the first managed system. When testing the fucntional account or rotating the managed account password, we are getting the error below: 2025-01-13 18:07:49.121 +00:00 [Debug] (23) (85f1e494-7492-4a55-9a66-9db07cb54c3e) api/ps/forms/functional-accounts/FormDefinition/PerformAction/{id} PerformAction -1-  An unexpected error has occurredBeyondTrust.Webconsole.ApiExceptions.BadRequestException: Verify Functional Account credentials action.Error: client credentials config not foundPlugin: Name=SSH, Id=22e4a4e1-3f85-4037-a567-a9b7a0d7179b, Version=3.8.1.0, Publisher=BeyondTrust   at BeyondTrust.WebConsole.PasswordSafe.Plugin.Services.Services.Forms.FunctionalAccount.BaseFunctionalAccountFormService.<>c__DisplayClass47_0.<AddCredentialSectionFields>b__8()   at BeyondTrust.BeyondInsight.WebConsole.Service.DynamicForm.Service.BaseFormService`2.PerformAction(FormDefinition formDefinition, String

1524
A
B
BrandonLucas_BFApprentice
posted in General
Cloud / SaaS Proxy Capabilities off-premise

Hi everyone - I wanted to raise awareness on a recent idea I submitted, and also open a discussion to see how/if any others are addressing this use case: Cloud / SaaS Proxy Capabilities | All Product Ideas - PublicPlease upvote the idea if you would find value in it. Also, I would love to hear how you have solved this. Tldr; if you want to inject a web-based credential into a managed session, how can you achieve this when the user is off-premises with no VPN (aka. resource broker access) capability? 

222
B
R
RahulBApprentice
asked in General
How to manage local scan account and functional account step by step

Hello Everyone, I can understand the logic behind the automatic password rotation of local functional account even if we have new server onboarded using same first functional account credentials, but it is untested. i am trying to test it and update it once done. Regarding the Local scan account i actually do not have any idea that how can we manage it (Using enable scanner on managed account i know but what if we have onboarded 100 servers and now we need to scan 100 more and the scan account is using old credentials on remaining 100 servers also if i need to perform the scanning on old scanned assets?)There are lots of questions in my mind regarding the management of local scan accounts.Please feel free everyone to share your recommendations………………………….

2705
B

Badge Earners

  • BCA: AD Bridge
    jamadohas earned the badge BCA: AD Bridge
  • BCA: Endpoint Privilege Management - Mac
    Jens Hansenhas earned the badge BCA: Endpoint Privilege Management - Mac
  • BCIE: Privileged Remote Access
    jamadohas earned the badge BCIE: Privileged Remote Access
  • BCIE: Endpoint Privilege Management - Windows
    Rajesh Jaganathan1has earned the badge BCIE: Endpoint Privilege Management - Windows
  • BCIE: Endpoint Privilege Management - Windows
    Jamil Ur Rehmanhas earned the badge BCIE: Endpoint Privilege Management - Windows
Show all badges
Terms & ConditionsCookie settings