FA Linux Server

3 replies
219 views

I have 300 Linux servers and need to onboard them as a managed system. What would be the best practice in terms of Functional Account? ONE FA to all Linux server or one FA to each linux server? They are all local accounts.

H

HowardAnswer

BeyondTrust Employee

To manage the Linux machines local accounts you will need to create a FA for each individual Linux machine and assign the require elevated permission. If you want to use a single FA account within Password Safe to be used for all the 300 Linux machine you will have to the FA in every individual Linux machine and set the same password for all.

https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0016828

https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0017405

H

HowardAnswer

BeyondTrust Employee

To manage the Linux machines local accounts you will need to create a FA for each individual Linux machine and assign the require elevated permission. If you want to use a single FA account within Password Safe to be used for all the 300 Linux machine you will have to the FA in every individual Linux machine and set the same password for all.

https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0016828

https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0017405

H

HigorAuthor

Trailblazer

Thanks.

Higor Louback

B

BrandonLucas_BF

Apprentice

Just to clarify this as well.. in this setup can the Linux functional account also be auto managed so that the credential would rotate on all associated managed systems periodically?

If so, how would this work when new Linux systems come online, in terms of the FA password? It would be unknown at that point, so the onboarding would fail?

Badge Earners

Sign up

Login to the community