Skip to main content

BeyondInsight / Password Safe

Manage privileged passwords, accounts, keys, secrets, and sessions for people and machines and secure non-privileged employee passwords for business applications.

191 Topics
R
RidwaanKApprentice
asked in General
Propagation action how to list which account have them and how to alert if the action fails

we have propagation action for service account would how we can list which account are associated with the propagation action  and how do we alert it the action fails for some reason

961
H
BeyondTrust Employee
Chitta2019
Chitta2019Trailblazer
asked in General
How to create and test Connection Profiles For Windows Server in Password Safe

I checked KB0019103 kb article but this works only for Linux Servers, is there any such mechanism for RDP Connection on Windows Servers as well?I want to restrict specific users so that they can’t see reboot and shutdown option or their sessions should be terminated same as in Linux Server. 

462
Chitta2019
Chitta2019
Chitta2019Trailblazer
asked in General
Need a report containing list of user accounts on Assets onboarded to Password Safe

I tried extracting the User Account on Asset Report under Analytics & Reporting tab Reports->AssetUser->Account. But the report contains disabled account as well, I need the report to contain the Disabled column having True/False Flag.See below screenshot of one asset If in asset details there is column of Disabled then why can’t we see in reports. 

401
B
BeyondTrust Employee
T
tcussatNewcomer
asked in General
Server grouping

Is there a way to limit the servers a user sees when accessing their privileged account? We want to be able to only list servers a user has access to in AD so that they can RDP to them without being overwhelmed with a listing of all servers.

2485
Jaconette de Kock
W
Waleed QureshiApprentice
asked in General
Unable to get RDP sessions of managed systems from Password Safe

Hi, I am unable to get RDP sessions after updating my assets.   

712
W
S
SFARising Star
asked in General
Is there a way to alert when an user views the recording ?

Is there a way to alert when an user views the recording ? We can see it says 1 audit after the video is played etc but can we sent this as alert? or is it part of the audit logs? and can we sent that to the SIEM and from their set alert?

571
H
BeyondTrust Employee
N
Nicolas.GApprentice
asked in General
Application session hijacking

Hello everyone, I am having an issue in my enviroment, we have 2 RDS assets who has a load balancer between the PS Server and then. And the session hijacking is occurring only on application session, the access policies is already on the configuration to logoff on disconect, force termination and enhanced session auditing, I tested some ports in the load balancer that are used to deploy the ESA service, 445 and 139, and both were blocked, but even after the release the problem persisted, not all sessions suffer from this problem of session stealing, but it is a significant number that is impacting on the experience of using the tool. Someone can help me with any other alternative to avoid this problem? Thanks

1135
F
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Feb 10 - Feb 17)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021346 - MobaXterm SFTP side pane missing directories and file when doing Quick Connect session that are proxied through Password Safe KB0021989 - HA Error: Validate partner product configurations... The SQL Server account names which Endpoint Privilege Management is configured to use must match. KB0022015 - How to restrict users from viewing passwords when Password Safe and PRA are integrated KB0022021 - Direct Connect SSH session timeouts with MFA error "connection reset by peer" KB0022029 - RDP sessions are disconnecting after a few minutes "The connection to the remote computer was lost, possibly due to network connectivity problems" KB0022039 - After upgrading to Password Safe 24.3, API call to get secrets using path is not retrieving the secret KB0022043 - BeyondTrust Scan Accounts not closing sessions. Idle ses

180
GloriaB
BeyondTrust Employee
Chitta2019
Chitta2019Trailblazer
asked in General
Need a report containing list of assets having no managed account

Need a report containing list of assets having no managed account

463
Chitta2019
Chitta2019
Chitta2019Trailblazer
asked in General
Need a report containing list of users having access to which assets through which managed account

Need a report containing list of users having access to which assets through which managed account, I have already tried running Entitlement by User report but it does not meet my usecase.I need a single csv file containing the list of all the users having access to which all managed systems via which which managed account. Needed for compliance purpose, but this BeyondTrust PasswordSafe is unable to meet my criteria. I am clueless to know that this tool is PAM Leader in the market!!!

201
P
S
SugunaRajalakshmiApprentice
asked in General
Discovery Scan onprem - PasswordSafe

Hi Team,  Recently I’ve performed Discovery Scan during that time I have faced this below Issue.“discovery agents below version 20.1 are end of life, not supported for new scans and need to be updated” Are there any updation do we need to take ? or I need to check anything? Appriciate your support. Thanks!

312
S
S
SFARising Star
asked in General
Linux platform not working when the prompt ends with >

Hello I did the upgrade to 24.3 as there was a KB which mentions that when the prompt ends with > , platform testing fails with account verification which is the behavior we are facing. we are still facing this issue even after upgrade to 24.3

242
S
S
samiTrailblazer
asked in General
Functional Account Automatic Password Management

Hi Team. What is the best practice for enabling the automatic password management for the functional account? Is it recommended to do so? and once it is enabled is it only going to rotate the password for the functional account or it will rotate all other managed accounts that are onboarded to Password safe? and how can we retrieve the password of functional account from the console once it is enabled? Appreciate your feedback on this?   

845
B
A
alexsilvabunkerApprentice
asked in General
Error when testing the functional account or rotating the passwords

Team, we deployed a new Password Safe install and just added a Linux server manually as the first managed system. When testing the fucntional account or rotating the managed account password, we are getting the error below: 2025-01-13 18:07:49.121 +00:00 [Debug] (23) (85f1e494-7492-4a55-9a66-9db07cb54c3e) api/ps/forms/functional-accounts/FormDefinition/PerformAction/{id} PerformAction -1-  An unexpected error has occurredBeyondTrust.Webconsole.ApiExceptions.BadRequestException: Verify Functional Account credentials action.Error: client credentials config not foundPlugin: Name=SSH, Id=22e4a4e1-3f85-4037-a567-a9b7a0d7179b, Version=3.8.1.0, Publisher=BeyondTrust   at BeyondTrust.WebConsole.PasswordSafe.Plugin.Services.Services.Forms.FunctionalAccount.BaseFunctionalAccountFormService.<>c__DisplayClass47_0.<AddCredentialSectionFields>b__8()   at BeyondTrust.BeyondInsight.WebConsole.Service.DynamicForm.Service.BaseFormService`2.PerformAction(FormDefinition formDefinition, String

793
C
S
samiTrailblazer
asked in General
Discovery Scan Issue

Hi. I have recently performed a detailed discovery scan against one asset, it completed successfully but I am not seeing any details for services, tasks etc etc. Scan was completed three hours ago.Is it normal to take a long time to get this information populated? Are there any logs I need to check to see why I am not seeing the details yet?   

1254
S
S
BeyondTrust Employee
SaqerBeyondTrust Employee
asked in General
Smart Rules that are used to automatically onboard both local and domain accounts

Hi All,Is there anyone can brief us with the used smart rules used to automatically onboard local and domain accounts after discovery? this request is raised by a lot of customers, so if any one can brief and help.

911
N
BeyondTrust Employee
M
MiyamotoNewcomer
asked in General
BT updater not downloading the packages

Dear I am trying to update Beyondinsight, passwordsafe, and appliance management from BT updater but it is not able to downlaod the packages and in the passive node it neither able to display the passwordsafe available version. The idea is to go with offline installation. Is there any way to fix the BT updater and avoid go to offline? if no is there someone with the same issue and solved by going to offline installation? Please share your insights.

361
P
A
AmilaKRising Star
asked in General
Password Safe Active-Active Deployment Queries

Hello Guys,Can we configure  password safe active-active deployment with minimum of two nodes as below ? Can UVM-1 act as both management & worker node ?     

533
rhagerm
C
Carlos MendonçaRising Star
asked in General
Local Linux accounts password rotation in PWA

HI Everyone, I have onboarded the local Linux accounts in PWA. But am looking for password rotation via PWA for non domain joined Linux accounts. Does any one have idea about local Linux accounts password rotation in PWA. If yes please suggest me on this. Thanks and looking for your quick support.Password Safe

852
GloriaB
BeyondTrust Employee
A
AmilaKRising Star
asked in General
How that Password Safe Asset based Licenses are calculated

Hi guys,Just want to clarify,how that asset based license works in password safe  ? For example, For one IP based asset ,If we establish a SSH connection to the OS, a web-based session to the application, and a desktop-based session to the database for the same virtual machine with the same IP address, is the license requirement one or three?Further according to the below article,total number of assets found in assets page utilizes the licenses .In that case what about the applications through RDS ? https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0019502  

1126
A
M
mj15Apprentice
asked in General
Discovery Scan Port Communication Direction

Hi All,  For running detailed discovery scan, we need to open multiple ports between Password Safe Appliances/Resource Brokers and Target Systems. I wanted to understand whether those ports communication would be unidirectional or bi-directional?  RegardsMahendra

1135
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Jan 27 - Feb 3)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021706 - Enable password test agent box not staying checked when enabled KB0021901 - Error when launching a remoteapp session "The system cannot find the file specified" KB0021929 - How to configure Managed Account DSS key rotation KB0021966 - Oracle functional account or managed account password tests fail with Oracle errors "ORA-01882" and "ORA-00604" KB0021967 - Error when running Oauth API script from the appliance "Failed to authenticate" - "Token issuer is invalid" KB0021972 - After upgrading, no accounts are showing in the Password Safe tile. KB0021981 - Configuration of proxy settings no longer works after upgrade to Password Safe 24.3 on-prem - Entra ID test password and change password fails KB0021985 - TOTP setting "Enable for new directory accounts" or "Enable for new local accounts" disabled une

360
GloriaB
BeyondTrust Employee
A
ArtvinlotApprentice
asked in General
RDP & SSH Session Limitation

Hello Community, In a Password Safe active passive configuration scenario what factors determine the maximum number of concurrent RDP and SSH sessions? Are these influenced by hardware resources, system configurations or software restrictions? Best,Gavin

993
A
Edward V
Edward VNewcomer
asked in General
Secret Cache Windows Server Hardening

Hello Community,  Besides the usual server hardening best practices. Is there any advanced steps that should be taken to secure the Secret Cache Windows Servers? I’m looking forward to hearing everyone’s thoughts.  Best, Edward

722
V
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Password Safe - PRA Integration : View Password on Access Policy

Hi Team,We have Password Safe and PRA Integrated. We have some users who use both Password Safe and PRA to launch remote sessions.SRA Access Policy must have the View Password option enabled, so the users can retrieve the credential in PRA console. Because of this requirement in SRA access policy, users are able to view managed account passwords in Password Safe.How can we restrict users to NOT View Passwords in Password Safe and should be able to retrieve the credential in PRA Jump Session? Thanks,

802
Prudhvi Keertipati

Badge Earners

  • BCA: Endpoint Privilege Management - Windows
    Hakasehas earned the badge BCA: Endpoint Privilege Management - Windows
  • BCA: Endpoint Privilege Management - Mac
    Hakasehas earned the badge BCA: Endpoint Privilege Management - Mac
  • BCA: Remote Support
    Hakasehas earned the badge BCA: Remote Support
  • BCA: Endpoint Privilege Management - Mac
    joselopezhas earned the badge BCA: Endpoint Privilege Management - Mac
  • BCA: Password Safe
    gnajerahas earned the badge BCA: Password Safe
Show all badges
Terms & ConditionsCookie settings