Skip to main content

BeyondInsight / Password Safe

Manage privileged passwords, accounts, keys, secrets, and sessions for people and machines and secure non-privileged employee passwords for business applications.

312 Topics
R
RidwaanKApprentice
asked in General
Registered API usage reporting

I would like to enquire about api’s that we have registered on password safe how do we report on the activity. Example of what we require .If we create a API for a service account for example that is used by postman how do we report on the usage of the api . The reason is is the api that is registered is not is use we want to clean up .

193
H
BeyondTrust Employee
A
AndyHTrailblazer
asked in General
How to add a discovery scanner?p

Hello, we have 2 U-series Appliances for HA. On the “Asset” section, Appliance1 was shown as “discovery scanner”. However, Appliance2 is not “Discovery Scanner”. When we swap the active appliance to Appliance2, all discovery jobs are failed. How could we add the Appliance2 to “Discovery Scanner”? Thanks,

262
A
Arno
ArnoApprentice
asked in General
Local Drives in a RDS-Connection

Hi everyone,with a standard RDP connection, I can share and use my local drive in the connection.Is this also possible with a PWS connection, and can I set it as the default for certain connections?And what about applications that run on the RDP server? Some applications require data files that I would like to save or load. Regards Arno

241
Paulo144
S
suhail.salimNewcomer
asked in General
Password safe user license details

Is there any way we can get the user license count from the password safe?We need to know how to check how many licenses are utilized. 

4335
Chitta2019
K
Kevin MUApprentice
asked in General
PASM capabilities

Hello,  Can PASM support backend database activity monitoring, including the ability to capture and log all database updates, including modifications made directly to the backend via SQL queries ? Is it capable of tracking and recording executed SQL code, with sufficient detail to identify the nature of the changes. The functionality does include filtering and reporting capabilities based on date ranges, enabling administrators to view SQL activity executed within a specified timeframe ?

281
Q
BeyondTrust Employee
raymondus
raymondusApprentice
asked in General
How to upgrade UVM 2016 to UVM 2022 in A/A site

I have a customer using 3x UVM2016 in A/A mode and want to upgrade to UVM2022 A/A.Problem is, their existing UVM2016 are all SQLFree. Now we want to move to 1x UVM2022 with SQL as primary + 2x UVM2022 SQLFree.What is the best practice to do the upgrade for all nodes? If i want to upgrade just primary appliance from UVM2016SF to UVM2022SQL, is it okay? Can i just level everything, add new node, config as primary, and turn off the old node? What will happen to existing session records? Can we bring them from old appliance to new appliance? Is there any other consideration? 

1645
raymondus
mcencienzo
mcencienzoRising Star
posted in General
Unable to login to Password Safe Workforce after upgrading to v25.1.0.1570

Hi Everyone, Anyone having issue with their workforce plugin after upgrading to BeyondInsight 25.1.0.1570?

241
tclowater
BeyondTrust Employee
X
xNourahxApprentice
asked in General
Active Directory windows app

Hello,Has anyone successfully configured RemoteApp access to Active Directory?I'm trying to publish the "Active Directory Users and Computers" tool as a Windows application, but I haven't had any luck so far.I assumed it would be straightforward, and I'm using the following application command:%SystemRoot%\system32\dsa.mscI suspect the issue is that it doesn't accept .msc file types and might require an .exe file instead.Any ideas or suggestions?

1333
rhagerm
K
Kevin MUApprentice
asked in General
JIT access

Hello, does PASM have JIT access ? Or should i take Entitle ?

711
josegarza
A
alexsilvabunkerApprentice
asked in General
Error when testing the functional account or rotating the passwords

Team, we deployed a new Password Safe install and just added a Linux server manually as the first managed system. When testing the fucntional account or rotating the managed account password, we are getting the error below: 2025-01-13 18:07:49.121 +00:00 [Debug] (23) (85f1e494-7492-4a55-9a66-9db07cb54c3e) api/ps/forms/functional-accounts/FormDefinition/PerformAction/{id} PerformAction -1-  An unexpected error has occurredBeyondTrust.Webconsole.ApiExceptions.BadRequestException: Verify Functional Account credentials action.Error: client credentials config not foundPlugin: Name=SSH, Id=22e4a4e1-3f85-4037-a567-a9b7a0d7179b, Version=3.8.1.0, Publisher=BeyondTrust   at BeyondTrust.WebConsole.PasswordSafe.Plugin.Services.Services.Forms.FunctionalAccount.BaseFunctionalAccountFormService.<>c__DisplayClass47_0.<AddCredentialSectionFields>b__8()   at BeyondTrust.BeyondInsight.WebConsole.Service.DynamicForm.Service.BaseFormService`2.PerformAction(FormDefinition formDefinition, String

1904
A
B
BrandonLucas_BFApprentice
posted in General
Cloud / SaaS Proxy Capabilities off-premise

Hi everyone - I wanted to raise awareness on a recent idea I submitted, and also open a discussion to see how/if any others are addressing this use case: Cloud / SaaS Proxy Capabilities | All Product Ideas - PublicPlease upvote the idea if you would find value in it. Also, I would love to hear how you have solved this. Tldr; if you want to inject a web-based credential into a managed session, how can you achieve this when the user is off-premises with no VPN (aka. resource broker access) capability? 

262
B
R
RahulBApprentice
asked in General
How to manage local scan account and functional account step by step

Hello Everyone, I can understand the logic behind the automatic password rotation of local functional account even if we have new server onboarded using same first functional account credentials, but it is untested. i am trying to test it and update it once done. Regarding the Local scan account i actually do not have any idea that how can we manage it (Using enable scanner on managed account i know but what if we have onboarded 100 servers and now we need to scan 100 more and the scan account is using old credentials on remaining 100 servers also if i need to perform the scanning on old scanned assets?)There are lots of questions in my mind regarding the management of local scan accounts.Please feel free everyone to share your recommendations………………………….

3565
B
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Jun 9 - Jun 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021329 - Is BeyondInsight Password Safe affected by CVE-2024-6387 regreSSHion? KB0021689 - Web application freezes or hangs and credentials are not entered when application is configured to use AutoIT Passthru KB0021929 - How to configure Managed Account DSS key rotation KB0021981 - Configuration of proxy settings no longer works after upgrade to Password Safe 24.3 on-prem - Entra ID test password and change password fails KB0022039 - After upgrading to Password Safe 24.3, API call to get secrets using path is not retrieving the secret KB0022064 - Receiving error when attempting to delete account in User Management - Error generating access token in web console log file KB0022109 - Error when calling a Secrets Safe folder by folder id "[Error] (14) Microsoft.EntityFrameworkCore. Query An exception occurred while itera

650
GloriaB
BeyondTrust Employee
Arno
ArnoApprentice
asked in General
Custom Link

Hi everyone,  Is there a possibility to display a custom link on the registered website at Password Safe, which points e.g. to a helpdesk page? We have documented all the steps in a portal. End users should read the documentation before opening a ticket. Regards

161
H
BeyondTrust Employee
P
prasadp87Trailblazer
asked in General
Password rotation through API user

Hello All,I am looking for guidance for API script which used for password rotation of any managed account.We are currently using shell script for password rotation, but it seems failing for Invalid user/Password event though password fetch script is working fine for same user.If anyone has sample script, please share or if anyone knows pointer to develop new script for this requirement please help. Thanks,Prasad 

775
H
BeyondTrust Employee
K
Kevin MUApprentice
asked in General
Feature requirement

Hello, is PASM able to do this : The solution must support backend database activity monitoring, including the ability to capture and log all database updates, including modifications made directly to the backend via SQL queries. The solution must be capable of tracking and recording executed SQL code, with sufficient detail to identify the nature of the changes. The solution functionality must include filtering and reporting capabilities based on date ranges, enabling administrators to view SQL activity executed within a specified timeframe. Thank you.

333
H
BeyondTrust Employee
C
Carlos MendonçaTrailblazer
asked in General
Password Safe - PWA - Extension BeyondTrust Google Chrorme

Hello, how are you?Please, how can the option be configured to not open this box for the user? The idea would be to only use the extension for auto-filling as I can use with the administrator account.    

272
C
C
Carlos MendonçaTrailblazer
asked in General
Password Safe - PWA - Session Time

Hello, how are you?How do you enable the session time for password safe? The session time is extremely short.

602
C
C
Carlos MendonçaTrailblazer
asked in General
Password safe - Features

Hello, how are you?I need support on how the features in password safe work. What would be the best practice recommendations for the solution and environment? Do you have any documentation? What to enable or not?

352
H
BeyondTrust Employee
A
AnilreddyRising Star
asked in General
From On prem to password safe cloud migration

HI All, Good dayDo you have any document/article to migrate from on-prem to password safe cloud. Thanks and looking for your response

16210
H
BeyondTrust Employee
K
kimberlyvApprentice
asked in General
Password Safe Propogation Actions: IIS Management Service Delegation

Hello, do you know if there is anything in the works to have managed account credentials also be updated in IIS > Management Service Delegation? 

462
K
G
gabriel.restrepoApprentice
asked in General
How to Perform SCP/SFTP Transfers Between Managed Linux Systems via Password Safe?

Hello community,I have a question regarding our use of Password Safe. In our organization, we use Password Safe to access privileged SSH sessions. However, a question recently came up: since Password Safe is our only access method to managed Linux systems and credentials are never exposed to users, we're wondering how we could securely perform SCP or SFTP file transfers between two of our managed Linux systems.Has anyone encountered a similar scenario or found an effective approach for handling file transfers in a Password Safe-controlled environment?Any suggestions would be greatly appreciated.

953
Paulo144
C
Carlos MendonçaTrailblazer
asked in General
How to reset the admin console password for Password Safe. Admin account

How do I change the administrator password for the password safe console?

724
C
A
abhatiaApprentice
asked in General
Onboarding of GCP, Azure and AWS assets

Hi Team, I’ve been trying to find the steps/process for onboarding of GCP, Azure and AWS assets. I’ve seen KBA for onboarding of accounts only from these cloud platforms. Regards,Aditya Bhatia

462
A
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Jun 2 - Jun 9)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021685 - How to link Active Directory Managed Account to Managed System KB0022470 - Run Unix Shell Script Propagation Action does not work on managed system with custom port KB0022481 - Resource Brokers not properly load balancing session requests KB0022491 - 401 Unauthorized error when attempting to make OAuth connections from SCIM SaaS KB0022493 - SCIM connector 503 error KB0022496 - Is Radius Challenge login supported for Workforce Passwords login? KB0022497 - Workforce passwords browser extension unlabeled fields or buttons KB0022501 - Considerations when deploying the appliance in VMware cloud KB0022504 - Clicking update connector or create connector with the type SNMP results in an error: "Form is stale"

140
GloriaB
BeyondTrust Employee

Badge Earners

  • BCA: Endpoint Privilege Management - Linux
    Max ForeTechhas earned the badge BCA: Endpoint Privilege Management - Linux
  • BCA: AD Bridge
    Abusalim Shaikhhas earned the badge BCA: AD Bridge
  • BCA: Privileged Remote Access
    Abdelhamid.Saberhas earned the badge BCA: Privileged Remote Access
  • BCA: Endpoint Privilege Management - Windows
    Diego Matizhas earned the badge BCA: Endpoint Privilege Management - Windows
  • BCA: Privileged Remote Access
    M.Galanghas earned the badge BCA: Privileged Remote Access
Show all badges
Terms & ConditionsCookie settings