Skip to main content

BeyondInsight / Password Safe

Manage privileged passwords, accounts, keys, secrets, and sessions for people and machines and secure non-privileged employee passwords for business applications.

249 Topics
T
tsipesNewcomer
asked in General
API /Secrets-Safe/Secrets returns no data

We recently upgrade to 24.3 and now we have a reporting issue.  Using the API /Secrets-Safe/Secrets with a GET returned all the secrets stored.  Now, it returns nothing.  Other API calls to other endpoints work with no problem.  This is a SOX reporting issue now.  I have opened a ticket but thought I would try here to see if anyone had any thoughts.  Other than the software upgrade, nothing else has changed. TIA

431
H
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Apr 7 - Apr 14)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021854 - BeyondTrust Product Update Server changing from Imperva to CloudFlare KB0022146 - Not receiving reports from the Analytics and Reporting tool - No records were found matching your criteria KB0022192 - Appliance logs not downloading - timeout error "The request was canceled due to the configured HttpClient.Timeout of 100 seconds elapsing" KB0022199 - How to upgrade Secrets Cache for Windows KB0022211 - Resource Broker update fails "Setup Wizard ended prematurely because of an error"

240
GloriaB
BeyondTrust Employee
P
prasadp87Trailblazer
asked in General
Bulk Functional account changes

Hello Team,We have around 500+ Managed Systems, and we want to change their functional account in bulk. Can someone please suggest best possible way to do this?Note: The functional account remains same for all. Thanks,Prasad

371
R
J
BeyondTrust Employee
Johnli AzucenaBeyondTrust Employee
posted in General
Password Safe: Discovering and Adding Assets Interactive Workshop 

Hop on and join our interactive workshop, where you can gain hands-on experience and handle different use case scenarios.TITLE: Password Safe: Discovering and Adding Assets Interactive Workshop Date: 28 May 2025 Time: 8 am Eastern and 1 pm UK and 8 pm SGTDuration: 90 minutes  Workshop Aim:This interactive workshop enables participants to learn the aim and process of adding Assets into BeyondInsight. There will be an opportunity to troubleshoot and configure Discovery Scanning for different Use Cases, configure these within a virtual test environment and collaborate with other contributors. Learning Objective:Learn how to create and configure Discovery Scanning in Password Safe and apply them to specific use cases In this session we will cover:Known Assets and Managed Assets Adding an Asset into BeyondInsight manually Configuring a Detailed Discovery Scan Discovering and Scanning an Asset from a Directory Scheduling a Scan by Address Group Discovery Scanning Use Case ConfigurationClick 

340
J
BeyondTrust Employee
J
BeyondTrust Employee
Johnli AzucenaBeyondTrust Employee
posted in General
Password Safe: Access Policies Interactive Workshop

TITLE: Password Safe: Access Policies Interactive Workshop Date: 29 April 2025 Time: 3 am Eastern and 8 am UK and 3 pm SGTDuration: 90 minutes  Workshop Aim:This interactive workshop enables participants to learn the aim and process of configuring and scheduling Access Policies in Password Safe. There will be an opportunity to troubleshoot and configure Access Policies for different Use Cases, configure these within a virtual test environment and collaborate with other contributors. Learning Objective:Learn how to create, configure and schedule Access Policies in Password Safe and apply them to specific use cases In this session we will cover:Introduction to Access Policies Access Policy Types Configuring and Scheduling an Access Policy Connection Profiles Access Policy Use Case ConfigurationClick here to enroll! For more information on workshops or to make suggestions, please navigate here. 

310
J
BeyondTrust Employee
D
DerianVNewcomer
posted in General
Ability to upload our private CA certificate or to be able to turn off the certificate verification in the UI.

Hi all,I’m wondering if we’re the only ones who’s struggling with this problem, as you can find in already raised idea Ability to upload our private CA certificate or to be able to turn off the certificate verification in the UI. Sometimes if a CA certificate it’s not working, we need to rebuild the certificate instead of being able to only turn off the certificate verification option for SIEM integration (QRADAR) for example.Do you have similar situation by any chance? You can share your experience or vote for an idea if you find it useful.Cheers,DerianV

451
tclowater
BeyondTrust Employee
J
JayaNewcomer
posted in General
More Description Error message when RDP fails

Hello Everyone,I wanted to bring up this issue with RDP Failure error messages in PBPS. Currently, when an RDP session fails, users see a generic message like “Failed to connect RDP session” without any specific details on the reason- whether it’s an account lockout, network issue or authentication failure.Pbsm.log contains more detailed error codes, it would be great if these codes are translated into more meaningful messages within the UI, it would significantly reduce troubleshooting time.We have an idea for same raised:  More Description Error message when RDP | All Product Ideas - PublicWould love to hear if anyone else have encountered same challenges? You can share your experience or vote for an idea if you find it useful.CheersThanks and regardsJaya

851
tclowater
BeyondTrust Employee
V
VarunsUni29Apprentice
asked in General
Onboard TOTP Seed File to generate OTP Code in Password Safe

Dear Team, The client has a use case to upload TOTP seed file and generate the new OTP on the console [similar to the retrieve password option]. For example, BeyondTrust Password Safe acts like Google/Microsoft authenticator app. I can't find any platform to upload the seed file, which will generate the OTP as output. Anyone who implemented such use case before? This kind of usecase is already available in BitWarden. Please find the link below:Viewing TOTP Code: https://bitwarden.com/help/integrated-authenticator/ Thanks in advance!!Varun

871
tclowater
BeyondTrust Employee
B
BartoszApprentice
posted in General
Limited functionality of discovery scanner

Hello community,I’m wondering if our company is the only one who’s experiencing issues due to limited functionality of discovery scanner in password safe? We’re facing multiple issues including problems with discovering domain accounts added to local admins, constant login event alerts triggering etc.We even raised an idea for improvement for scanner:Improved discovery scanner | All Product Ideas - PublicI would like to know if you’ve got similar experience, maybe you found some solution to make it better, also if you found this idea useful please vote for it.Cheers,Bartosz

471
B
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Mar 31 - Apr 7)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021401 - WinSCP error: Remote side send disconnect message. Type 11 "Invalid Session Token" Authentication failed. KB0021691 - When trying to update a service with dependency that share a managed shared service account, it fails to start service KB0022148 - Discovery scan of Oracle database fails with error code 12514 KB0022150 - How to use EPMs Allow as Password Safe user option to grant access to Failover Cluster Manager KB0022151 - Is SQL always on required for Active Active environments? KB0022162 - Workforce Passwords URL is trimmed when creating a credential KB0022166 - 2019 SQL 2502 (February 2025) update failure KB0022171 - After upgrading to BeyondInsight 24.3 the EPM MMC policy editor login fails - Could not authenticate domain user KB0022172 - Large Active Directory (AD) group sync f

540
GloriaB
BeyondTrust Employee
J
JayaNewcomer
posted in General
Pagination concept to be include in PasswordSafe

Hello everyone,We’re looking for implementation of Pagination concept to efficiently handle large datasets by retrieving data in smaller, manageable chunks. This will improve response time and optimize memory usage, an idea for same has been raised: Pagination concept to be include in | All Product Ideas - PublicDo you have similar situation by any chance? You can share your relevant experience or vote for the idea if you find it useful.Cheers,Thanks and Regards,Jaya 

211
J
BeyondTrust Employee
R
RajabommuNewcomer
asked in General
Be able to import encryption certificates into BI Cloud

Hi All,The option to import QRADAR encryption certificates would allow validation to occur in both directions for TCP-SSL traffic. Regards,Raja

91
tclowater
BeyondTrust Employee
P
PrasadrayapudiNewcomer
asked in General
Secret key Rotation for Azure Functional Account setup in Password Safe

When configuring the functional account for rotating passwords in Azure, the secret used for the functional account will need to be manually rotated periodically.We would like to ask for an enhancement where the rotation of the secret can be performed automatically by Password Safe. Regards,Rayapudi Durga Prasad.

311
tclowater
BeyondTrust Employee
P
PASNewcomer
posted in General
Separate role for Reports only

Hello,It would be nice to have an option to distinguish separate role for Reporting only with possibility to generate reports for password safe activity (for particular smart groups) as currently it is necessary to assign "Auditor" role to achieve this but Auditor role at the same time provides access to session recordings and it's not possible to create role such Reporting Analyst with access to reports but no access to recorded sessions.What do you think about it?Regards

151
tclowater
BeyondTrust Employee
P
PASNewcomer
posted in General
Include the instance name on every single log that generated and forwarded to SIEM

Hello,What do you think about the idea that the instance name or source id be included in every single BI log. This to be able to filter the logs by instance name in the SIEM in a easier way. At this moment there are logs that where the instance name or source are not being listed on the payload.Cheers 

111
tclowater
BeyondTrust Employee
P
PrasadrayapudiNewcomer
asked in General
Description field for Azure AD managed accounts is empty

Hi All,We've observed that managed accounts originating from Azure Active Directory do not appear to synchronise their description field. Consequently, users encounter inconvenience as they cannot readily identify which account to use due to the absence of the description.Is it possible for BeyondTrust to automatically consider the "jobTitle" attribute in Azure AD as the account as description Regards,Rayapudi Durga Prasad

101
J
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Password Safe - Password Change Increase Timeout

Hi All,How can we increase the password change timeout for a platform?We noticed that our firewall devices password change commit job is taking longer time before Password Safe timeout the password change. Would like to know is there any option to increase the timeout value. until the firewall device completes password change commit.  Thanks,

483
C
V
VarunsUni29Apprentice
asked in General
Discovery Best Practice & API Usage

Hi Experts, I’m trying to find if there are any APIs available to initiate an adhoc discovery scan to specific set of systems? I failed to find any discovery APIs.Also, how does other customers are handling (discover & onboard) the newly created servers in day to day?Periodicity of discovery? Daily/Weekly? And if weekly then how do you handle the new systems? Please share your thoughts on this :) Regards,Varun

1492
C
Paul Dann
BeyondTrust Employee
Paul DannBeyondTrust Employee
posted in General
Smart Rule Configuration: Onboard Assets by Discovery Date and Platform

Smart Rule configuration Use Case based on the Onboarding of Assets by Discovery Date and Platform. Value of X can be defined by day, week, 30 days for example. Pre-configured relevant Functional Account and Password Policy applied based on related Platform. 

1291
V
B
BartoszApprentice
posted in General
Functional Account limitation

Hey community,Has anyone else encountered challenges with managing multiple tiers in Password Safe Cloud due to the limitation of a single functional account for rotating passwords? Please check out the idea Ability to have more than one funtional | All Product Ideas - Public and vote for it if you think it would be helpful for your use case!Cheers,Bartosz

241
A
BeyondTrust Employee
RajB
RajBNewcomer
posted in General
Possibility to resolve full name of Access Policy

Idea is to provide ability to resolve a full name of Access Policy as current configuration doesn't provide such functionality.Suggested solution: Allow to resolve full name after pointing mouse cursor on Access Policy. Related issue description:During selection of Access Policy for particular Smart Rule it's not possible to resolve a full name of Access Policy, there's character limitation of what is displayed, it cuts name with "..." and the rest is not visible. The problem is with Access Policies which have long names, their first part looks the same and only difference is for example L1 / L2 at the end - issue is that this part is not visible, usually in such situation name should be resolved after pointing mouse at the name of the policy but it's not happening in that case. In such situation it's not possible to make sure which policy we're selecting, we have to select policy blindly and after that check which one has been selected and assigned to smart rule.

71
frank.colvin
A
AshwinNewcomer
asked in General
Enhanced Session Audit (ESA) deployment fails Error code 1219

Getting error code 1219 error.During troubleshooting. I see no connection details from PAM resource broker to Target serverused `net use` commandDoes the BT in the background execute  `net use /delete \\server\share`  once the RDP session is closed from PAM.Require the troubleshooting steps in detail for 1219 error. 

231
N
BeyondTrust Employee
RajB
RajBNewcomer
posted in General
Configuration Export and import functionality via API or Cloud PasswordSafe BI console.

We propose adding configuration export and Import functionality to the Cloud PasswordSafe Console, allowing administrators to export configurations via API or directly from the PAM cloud console interface. This enhancement aims to enhance flexibility, streamline backup processes, and integrate seamlessly with our existing systems.Exporting configurations ensures operational continuity by maintaining backup settings.API-based configuration exports facilitate integration with our IT infrastructure and automate configuration management.

161
MikeK
E
EAKGNewcomer
asked in General
Would like to require 2 Factor when user RDPs to a specific set of servers.

Is there anyway, using PWS, to require a 2nd factor of authentication when using RDP to connect to a set of servers from PWS?

201
J
BeyondTrust Employee
R
RajabommuNewcomer
asked in General
Creation of article providing detailed explanation of how AD Fallback authentication mechanism works

Hello All,The AD fallback authentication mechanism is an essential feature for ensuring continuous access to resources, even when the primary authentication method (Kerberos) fails.I kindly ask you to create an official article that would explain in detail how the AD Fallback authentication mechanism works. Regards,Raja

81
GloriaB
BeyondTrust Employee

Badge Earners

  • BCIE: Password Safe
    Marcin Khas earned the badge BCIE: Password Safe
  • BCIE: Privileged Remote Access
    Marcin Khas earned the badge BCIE: Privileged Remote Access
  • BCA: Endpoint Privilege Management - Windows
    Guavehas earned the badge BCA: Endpoint Privilege Management - Windows
  • BCSE: Password Safe
    Waleed Qureshihas earned the badge BCSE: Password Safe
  • BCSE: Privileged Remote Access
    Allard Meermanhas earned the badge BCSE: Privileged Remote Access
Show all badges
Terms & ConditionsCookie settings