Skip to main content

BeyondInsight / Password Safe

Manage privileged passwords, accounts, keys, secrets, and sessions for people and machines and secure non-privileged employee passwords for business applications.

191 Topics
A
ArnoNewcomer
asked in General
How to onboard Windows Server with special rights system ?

We have an administrators group for each server in AD. Each member of this group has the local administrator rights for the respective server due to their membership. The servers are all in the same OU in AD. Unfortunately, nothing can be changed to the AD structure in the foreseeable future.We now want to onboard the Windows servers in the PWS. For compliance reasons, we have to work with named accounts on the servers.What is the best way to onboard the approx. 500 servers and the 300 managed linked accounts now?Creating a smart rule for each server, each administrator and then creating a mapping rule is not really a solution, is it?Regard Arno

713
rhagerm
B
bt101Veteran
posted in General
Use Case: Manual entry of managed account passwords

Hello All,How do you handle use cases where admins need to manually enter the managed account password multiple times in a day. These can be Workstation admins helping end-users directly on end-user workstations and manual entry of passwords is required . As the password rotates very frequently and is complex to remember or type in what is your approach .We have a password manager that they can use on phone , so that they don’t need to carry their laptop or login to PS on end-user machine. We are exploring using Yubikeys or other device which can store partial password and admins can memorize a few characters. Yubikeys don’t allow to restrict storage based on number of characters  though,. 

3107
MikeK
A
avobireddyNewcomer
posted in General
Issue with PS Automate INI

Getting an error while testing the ps Automate INI file. When i try to open through Powershell/CMD prompt, getting the issue.It is coming for default BT given INI file also.   

1183
A
M
maulik shahApprentice
asked in General
ps_automate for application launching in admin context

Hi All , Thanks in advance for your input .i am trying to launch powershell_ise.exe as admin in managed application session but when i send subsequent command it doesn’t work, same task sequence works when powershell_ise.exe launch as normal window.following is my script block --------------------------[General]EnableLogging=4LogMethod=2LogPath="D:\Log";RunApp="powershell -Command "Start-Process PowerShell_ISE -Verb RunAs "RunApp="C:\Windows\system32\WindowsPowerShell\v1.0\powershell_ISE.exe";AppWindowTitle="Administrator: Windows PowerShell ISE"[TaskSequence1]SequenceDelay=40000Sendkeys=^i  Any suggestion? Regards,Maulik

965
P
BeyondTrust Employee
P
prasadp87Trailblazer
asked in General
Export Accounts from BeyondInsight

Hello, We have one environment of BeyondTrust Insight with scanned accounts and managed accounts. We are planning to setup backup environment at different location with different domain. We wanted to export the accounts from environment 1 to this new one. Is there any way by which we can export those and re-import in other environment. Thanks,Prasad

13512
P
G
gabriel.restrepoApprentice
asked in General
Oracle - Password Safe Custom Plugin example

Hi,I am currently developing a Custom Plugin for Oracle (versions 10 and 11). However, I have not been able to find examples of Custom Plugins specifically for databases that could serve as a reference.Could you provide me with an example or relevant documentation to help me build a solid foundation for development? I appreciate your support in advance.Best regards.

642
G
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Mar 10 - Mar 17)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021816 - Password Safe Managed System cloud platform deprecation - Office 365 and Azure KB0022017 - Failed to established mirror for database: RetinaCSDatabase SQL Server returned: 'The server network address "TCP://:5022 KB0022057 - OAuth error when connecting to MMC policy editor - Failed to connect. Please check server details KB0022058 - Propagation action events missing from service accounts even though propagation actions are successful. Error: Bad Gateway 502 errors KB0022073 - Pathfinder and Password Safe Cloud 24.3.1 - SAML user is removed from the local group in PS Cloud KB0022086 - Discovery Smart Rule that includes a directory query shows no assets KB0022087 - Improved Quick Launch re-use workflow KB0022089 - After Password Safe upgrade getting unauthorized error for Vaulting request

210
GloriaB
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
PRA Web Jumps - Not showing the Credentials from Password Safe

We have PRA and Password Safe integrated.When launching Web Jump for a host esxxx, credentials are not being pulled from the Password Safe. but for the same host esxxx, when launching SSH Jump, credentials are able to pull from Password Safe.Is there any additional settings has to enabled for Web Jump to pull credentials from Password Safe?  Credentials added to PRA Vault is working but not from Password Safe.

442
Prudhvi Keertipati
G
gabriel.restrepoApprentice
asked in General
Radaware Load Balancer - Custom Platform SSH for PWS

Hello Community,I have a platform that is a Radware load balancer. I would like to know if anyone has a custom SSH platform for this device that they could share with me.I would greatly appreciate your support.Thanks in advance!

372
G
R
RevaTaraleApprentice
asked in General
Block mouse and keypad interruption during credential injection of application session in passwordsafe.

Hello team,I have web applications configured in password-safe. When the end user takes a session, it injects credentials. I want to temporarily block mouse and keypad control over applications during credential injection. Once user log-in completes, it should enable the end user to perform further activity.Any suggestions to achieve this use case will be appreciated. Thank you.

2087
R
P
prasadp87Trailblazer
asked in General
How to configure Discovery Scanner Agent

Hello All,I am looking for some information about discovery scan configuration.How do we setup scan agent and how its shown in list as to select for scanning? Thanks,Prasad

1157
B
BeyondTrust Employee
B
bt101Veteran
asked in General
Passwordsafe Email Template Customization

Hi,Is there a way to include a body tag which is not available in the description of that template but is available for other template. For Release Request Access Policy mail template, we want to include the Reason in the email. But available body tags does not have “ :RequestReason:”In other mail template it is available. The form captures it that means it is being recorded somewhere. Is there any way to include the reason in “Release Request Access Policy” mail template

141
P
P
prasadp87Trailblazer
posted in General
How to see domain login option for BeyondInsight

Hello Everyone,I was looking for reference to enable domain login for BeyondInsight. (like screen below). We have directory credentials account working fine. I tried by creating new domain in domain management but still I could only see UserName and Password field on login screen. I am looking for that third field “Log in to” with domain name in that as option.  

428
P
Chitta2019
Chitta2019Trailblazer
asked in General
Powershell script for password update on managed system

I need a PowerShell script which will set the password on managed system once the managed account password is rotated by functional account as per password policy in PasswordSafe. I think it’s possible through propagation features but don’t know how to do. Can anyone please help me on this? 

1335
P
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Mar 3 - Mar 10)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021672 - Analytics & Reporting process daily failed - File system error: A string store or binary store with a compatibility level of '1050' is at the maximum file size of 4 gigabytes. KB0022048 - After editing a Built-in custom platform, the configurations were reset KB0022074 - How to assign permissions and features for login users to test and change password on managed accounts KB0022078 - Unable to assign Password Safe roles to smart groups - Blank error received KB0022082 - Setting HA error - Test heartbeat communication failed. The remote name could not be resolved KB0022100 - Does the Password Safe RDP Artifact Hotfix 24.3.0.1263 or cloud maintenance conflict with Microsoft's fix KB5051987 KB0022102 - What KEX Cipher, Host Key Algorithm, Encryption Cipher, and MAC Cipher IDs does the Discovery Scanner use?

220
GloriaB
BeyondTrust Employee
N
naidu_jstsRising Star
asked in General
Supported platforms complete List

How to get the complete list of supported platforms for beyondtrust passwordsafe? what we see is in few versions the platforms that were listed are removed in the newer ones does that mean its not supported? Also If we have to get the complete list how do we get which is supported and which are not supported.

717
GloriaB
BeyondTrust Employee
I
imheejaeNewcomer
asked in General
Questions about managing expiration dates after installing BI certificates

hi,When I installed EPMfW, I installed the BeyondInsight certificate together.The installed certificate has a validity of 10 years. After 10 years, do I have to install the new certificate directly on each PC? Is there any other way to manage it?

251
DavidC
BeyondTrust Employee
J
Jens HansenVeteran
posted in General
GUI New Knowledge button in PS Cloud.

First off thanks for adding a Knowledge Center to Password Safe, really great.BUT why does this have to be a “lose” button that can be placed anywhere on the screen.Default, right on top of your counts. Exactly the same was done prior in PM Cloud, WHY. This could easily be a static button in the menu on the left, plenty of room for both PS Cloud and PM Cloud.

204
MikeK
A
ArtvinlotApprentice
asked in General
Session Recording retention for Cloud

Hello Guys, In Password Safe cloud the retention policy for session recordings is 1 year, is there any method we can extend this in the cloud, or can we get it saved to an on-prem server or NAS? Thanks Gavin 

541
A
BeyondTrust Employee
S
SugunaRajalakshmiApprentice
asked in General
Password Safe - Azure EntraID Pre-requesites

Hello team, could someone please share the prerequisites what we required to further onboard and the key information we need to request from the customer regarding this Azure? Below, I have outlined the relevant scenarios. Customer Mentioned: This is an Cloud SaaS Password Safe, Users are in Azure EntraID and servers are Domain-Joined. I have collected these below KB's :Configuration SAML Azure EntraID - https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sys_kb_id=dd8ff4a91b019e946fe95287624bcb37 EntraID FA MA - https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sys_kb_id=aad9352747511e50b77b3ddbd36d4384 Attached Asset requirement sheet.Thansk!

623
S
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Feb 24 - Mar 3)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022023 - Error "HTTP status code: undefined" when trying to log in to Password Safe Cloud KB0022032 - How many FIDO2 Authenticators can be registered in Password Safe? KB0022059 - Secret Cache server error: Couldn't connect to server. Failed to create HTTPS rest server KB0022062 - RDP proxied session through Password Safe is missing bgInfo KB0022064 - Receiving error when attempting to delete account in User Management - Error generating access token in web console log file KB0022076 - How to setup high availability active passive pair

180
GloriaB
BeyondTrust Employee
N
NaraApprentice
asked in General
BeyondTrust BCIE - Password Safe Certification Exam Eligibility

Hi All, I have a question regarding my exam eligibility for BCIE - Password Safe Certification.In BCIE - Password Safe Learning Path inside BeyondTrust University platform, there is a module called ‘Password Safe Deployment Exam’. I already took the exam and pass it on November 07th, 2024. Today (February 27th, 2025), I want to review the exam questions but because of the bug which I cannot view all the exam questions then I try to retake the exam. After I retake, I found out I failed the exam and I cannot retake the exam again. But if I see the status of the module, it still said “Course Completed”.  My question is:am I still eligible to take Lab Assesstment Exam?I already took the Password Administration Exam before and pass it. So I only need to pass the Lab Assesstmen Exam. From my view, I can still complete the last module if you see the capture below but I have concern since I failed the newest retake in Password Safe Deployment Exam module.I am waiting for all of your responses.

672
N
C
Collins MburuVeteran
asked in General
can you scan for local sql sevrer accounts

trying to scan SQL server databases getting all the databases but no local accounts any help will be greatly appreciated

991
H
BeyondTrust Employee
C
chiragNewcomer
asked in General
Credential Checkout for PasswordSafe Managed Account

Hi team,Is it possible to have credential checkout functionality outside of RDP sessions in PasswordSafe cloud. Thanks,CS 

262
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Feb 17 - Feb 24)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022010 - How does the worker node recognize which network interface to use for communication? KB0022053 - Password Safe report not showing all reviewed sessions KB0022056 - After editing default Password Policy, the configurations were reset. KB0022058 - Propagation action events missing from service accounts even though propagation actions are successful. Error: Bad Gateway 502 errors KB0022067 - How to backup Secrets Safe for disaster recovery

300
GloriaB
BeyondTrust Employee

Badge Earners

  • BCA: Endpoint Privilege Management - Windows
    Hakasehas earned the badge BCA: Endpoint Privilege Management - Windows
  • BCA: Endpoint Privilege Management - Mac
    Hakasehas earned the badge BCA: Endpoint Privilege Management - Mac
  • BCA: Remote Support
    Hakasehas earned the badge BCA: Remote Support
  • BCA: Endpoint Privilege Management - Mac
    joselopezhas earned the badge BCA: Endpoint Privilege Management - Mac
  • BCA: Password Safe
    gnajerahas earned the badge BCA: Password Safe
Show all badges
Terms & ConditionsCookie settings