Skip to main content

General

A general place for Password Safe conversations.

  • 254 Topics
  • 617 Replies
252 Topics
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - June - Password Safe

Discover What's New in Password Safe 25.1 Workforce Passwords for PathfinderWith Password Safe 25.1, Workforce Passwords is fully compatible with Pathfinder! Previously, the extension didn’t work when customers were activated in Pathfinder. Now, everything runs as expected. Plus, there’s a great new feature on the login screen: a handy dropdown menu that lets you choose your login portal. Simply select Pathfinder to sign in via beyondtrust.io, then enter your Pathfinder credentials to access your Workforce Passwords secrets with ease. Mobile Application Session Timeout SettingIn Password Safe Cloud and on-prem, you’re in control - configure the Mobile app to auto-timeout after a set number of minutes! Deployable WFP ExtensionWorkforce Passwords makes it easy and secure to store and access business credentials right from your browser. And now with Password Safe 25.1, deploying the WFP browser extension is smoother than ever! Admins can effortlessly roll out the extension across Chrome,

100
B
Community Manager
B
Community Manager
BeyondTrust CommunicationsCommunity Manager
published in General
Monthly Buzz - May - Password Safe

Azure Key Vault - Password Safe Custom Plugin While there is a Platform Plugin for Azure AD /Entra ID out-of-the-box, it is used for managing Entra ID Users passwords.  We have seen demand over the years for the capability to manage Azure Key Vault credentials. The Plugin covered in this guide includes support for managing Secrets.  Capabilities  Change Managed Account Credentials using Functional Account Change Functional Account Credentials Verify Managed Account Credentials Verify Functional Account Credentials Discover Accounts The Password Safe Resource Kit includes a SDK for developing Custom Plugins. The SDK comes with a Sample Plugin example, which has been used to create this Custom Plugin example to allow for the rotation of Secrets in Azure Key Vault. Read more here Latest Available Version:Password Safe 24.3– December 2024 Beekeepers Hot Topics PasswordSafe/ WebConsole login  “Hi Team,I have a query regarding web console login: "Can we use the same user account for

350
B
Community Manager
A
AyanWSTrailblazer
asked in General
Extended RDP session - 2-4 days

Team,I am curious to know whether it’s possible to extend/allow RDP session for more than 2 days. Concern team wants to perform a job and they might need to keep the session active for about 2 days at least. Is it something we can leverage from BI console? Please suggest.

441
J
BeyondTrust Employee
A
Anil ReddyApprentice
asked in General
virtual appliance deployment on vm for passwordsafe on prem

HI All, Planning to configure on prem virtual appliance on VM new server to deploy the BI and passwordsafe.Can you share any one the article to start the deployment step onwords ,how we can go head to complete this new setup for testing purpose we are planning to deploy only one appliance. Thanks 

214
Prudhvi Keertipati
P
prasadp87Trailblazer
asked in General
Can NTLM be disabled for Beyond Trust.

Hello Team,  We have received a requirement from our security team to disable NTLM for Beyond Trust. We are using Beyond Insight Password safe and U series appliance.I have seen few of the topic which discuss about same but not sure if we still can disable NTLM and it won't break anything.  Some of the reference topics are -Endpoint Privilege Management - Can EPM policy be configured to deactivate NTLM ?BeyondInsight / Password Safe - NTLM is being deprecated; can it be removed from U-Series appliances? Please suggest. Thanks,Prasad 

425
P
C
Carlos MendonçaTrailblazer
asked in General
Password Safe - Managed Account

Hello,Please, how do I synchronize user accounts in the domain to managed accounts? To have visibility of all user accounts and rotate the password if necessary.  

253
Prudhvi Keertipati
R
Raja SekharApprentice
asked in General
where to find scheduled password change logs

Hi Team,  Please help me to find out the logs of the scheduled password change on UVM. Best Regards,Raja Sekhar L.

2753
B
N
NectarNinjaApprentice
asked in General
RDP Failed Tested pretty much everything...

Hi everyone, hope you are doing well.Recently, we’ve been doing some testing and scratching our heads since its impossible to succeed.We’re attempting to connect to an Asset using Passwod Safe RDP session, but the PBSM log message shows as follows:#######################################################################2025/06/27 11:47:45.577 531988 523196 INFO: RDP Handler 531988 starting2025/06/27 11:47:45.592 531988 523196 WARNING: Could not open HKLM\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\SslBindingInfo\0.0.0.0:443 0x22025/06/27 11:47:45.592 531988 523196 INFO: Reading self signed cert2025/06/27 11:47:45.795 531988 534272 INFO: (RDP server) Client Security: NLA:1 TLS:1 RDP:02025/06/27 11:47:45.795 531988 534272 INFO: (RDP server) Server Security: NLA:0 TLS:1 RDP:02025/06/27 11:47:45.795 531988 534272 INFO: (RDP server) Negotiated Security: NLA:0 TLS:1 RDP:02025/06/27 11:47:45.858 531988 534272 INFO: (RDP server) Accepted client: CVLP-JPALACIN2025/06/27 11:47:45.858 531988

324
Paulo144
P
prakash.rApprentice
asked in General
Caching Issue with Web Applications via Password Safe and Microsoft Remote Desktop on MacOS

Hi,{This issue is only applicable to MacOS environments}Is anyone facing an issue where, when launching a web application (using PSautomate) via Password Safe in MacOS using the Microsoft Remote Desktop application, there is some sort of caching issue? For example, let’s say I download the RDP file for a web application at "https://app1.example.com"; the Microsoft Remote Desktop will prompt an “RDP certificate warning,” and the user will click "Continue," allowing the browser and web application to launch successfully. Example of “RDP Certificate Warning” However, once they close this web application browser (browser only and not the entire Microsoft remote desktop app) and launch another web application session (such as "https://app2.example.com") using a new RDP file downloaded from the Password Safe portal, it doesn’t prompt the “RDP certificate warning” and instead launches the old web application ("https://app1.example.com") session instead of the new one, even though we clearly l

160
P
R
RidwaanKApprentice
asked in General
Registered API usage reporting

I would like to enquire about api’s that we have registered on password safe how do we report on the activity. Example of what we require .If we create a API for a service account for example that is used by postman how do we report on the usage of the api . The reason is is the api that is registered is not is use we want to clean up .

153
H
BeyondTrust Employee
A
AndyHTrailblazer
asked in General
How to add a discovery scanner?p

Hello, we have 2 U-series Appliances for HA. On the “Asset” section, Appliance1 was shown as “discovery scanner”. However, Appliance2 is not “Discovery Scanner”. When we swap the active appliance to Appliance2, all discovery jobs are failed. How could we add the Appliance2 to “Discovery Scanner”? Thanks,

192
A
Arno
ArnoApprentice
asked in General
Local Drives in a RDS-Connection

Hi everyone,with a standard RDP connection, I can share and use my local drive in the connection.Is this also possible with a PWS connection, and can I set it as the default for certain connections?And what about applications that run on the RDP server? Some applications require data files that I would like to save or load. Regards Arno

131
Paulo144
S
suhail.salimNewcomer
asked in General
Password safe user license details

Is there any way we can get the user license count from the password safe?We need to know how to check how many licenses are utilized. 

3295
Chitta2019
K
Kevin MUApprentice
asked in General
PASM capabilities

Hello,  Can PASM support backend database activity monitoring, including the ability to capture and log all database updates, including modifications made directly to the backend via SQL queries ? Is it capable of tracking and recording executed SQL code, with sufficient detail to identify the nature of the changes. The functionality does include filtering and reporting capabilities based on date ranges, enabling administrators to view SQL activity executed within a specified timeframe ?

251
Q
BeyondTrust Employee
raymondus
raymondusApprentice
asked in General
How to upgrade UVM 2016 to UVM 2022 in A/A site

I have a customer using 3x UVM2016 in A/A mode and want to upgrade to UVM2022 A/A.Problem is, their existing UVM2016 are all SQLFree. Now we want to move to 1x UVM2022 with SQL as primary + 2x UVM2022 SQLFree.What is the best practice to do the upgrade for all nodes? If i want to upgrade just primary appliance from UVM2016SF to UVM2022SQL, is it okay? Can i just level everything, add new node, config as primary, and turn off the old node? What will happen to existing session records? Can we bring them from old appliance to new appliance? Is there any other consideration? 

1265
raymondus
Paulo144
Paulo144Veteran
asked in General
BI 25.1 - 405 method not allowed

Anyone else after updating to BI 25.1 is getting 405 when trying to edit/delete any item of Configuration? I Tried to edit a Api Registration and got 405, tried to delete a acess policy got 405, tried to enable Pre-Login banner, got the 405.I even applied the lastest hotfix for 25.1, but the problem continues, any other menu like managed sytem, assets the delete and put method works just fine. Just want to know if its a me problem or if anyone else saw the same before opening a case.Example:  

231
tclowater
BeyondTrust Employee
M
mcencienzoRising Star
posted in General
Unable to login to Password Safe Workforce after upgrading to v25.1.0.1570

Hi Everyone, Anyone having issue with their workforce plugin after upgrading to BeyondInsight 25.1.0.1570?

101
tclowater
BeyondTrust Employee
X
xNourahxApprentice
asked in General
Active Directory windows app

Hello,Has anyone successfully configured RemoteApp access to Active Directory?I'm trying to publish the "Active Directory Users and Computers" tool as a Windows application, but I haven't had any luck so far.I assumed it would be straightforward, and I'm using the following application command:%SystemRoot%\system32\dsa.mscI suspect the issue is that it doesn't accept .msc file types and might require an .exe file instead.Any ideas or suggestions?

453
rhagerm
K
Kevin MUApprentice
asked in General
JIT access

Hello, does PASM have JIT access ? Or should i take Entitle ?

351
josegarza
A
alexsilvabunkerApprentice
asked in General
Error when testing the functional account or rotating the passwords

Team, we deployed a new Password Safe install and just added a Linux server manually as the first managed system. When testing the fucntional account or rotating the managed account password, we are getting the error below: 2025-01-13 18:07:49.121 +00:00 [Debug] (23) (85f1e494-7492-4a55-9a66-9db07cb54c3e) api/ps/forms/functional-accounts/FormDefinition/PerformAction/{id} PerformAction -1-  An unexpected error has occurredBeyondTrust.Webconsole.ApiExceptions.BadRequestException: Verify Functional Account credentials action.Error: client credentials config not foundPlugin: Name=SSH, Id=22e4a4e1-3f85-4037-a567-a9b7a0d7179b, Version=3.8.1.0, Publisher=BeyondTrust   at BeyondTrust.WebConsole.PasswordSafe.Plugin.Services.Services.Forms.FunctionalAccount.BaseFunctionalAccountFormService.<>c__DisplayClass47_0.<AddCredentialSectionFields>b__8()   at BeyondTrust.BeyondInsight.WebConsole.Service.DynamicForm.Service.BaseFormService`2.PerformAction(FormDefinition formDefinition, String

1384
A
B
BrandonLucas_BFApprentice
posted in General
Cloud / SaaS Proxy Capabilities off-premise

Hi everyone - I wanted to raise awareness on a recent idea I submitted, and also open a discussion to see how/if any others are addressing this use case: Cloud / SaaS Proxy Capabilities | All Product Ideas - PublicPlease upvote the idea if you would find value in it. Also, I would love to hear how you have solved this. Tldr; if you want to inject a web-based credential into a managed session, how can you achieve this when the user is off-premises with no VPN (aka. resource broker access) capability? 

212
B
R
RahulBApprentice
asked in General
How to manage local scan account and functional account step by step

Hello Everyone, I can understand the logic behind the automatic password rotation of local functional account even if we have new server onboarded using same first functional account credentials, but it is untested. i am trying to test it and update it once done. Regarding the Local scan account i actually do not have any idea that how can we manage it (Using enable scanner on managed account i know but what if we have onboarded 100 servers and now we need to scan 100 more and the scan account is using old credentials on remaining 100 servers also if i need to perform the scanning on old scanned assets?)There are lots of questions in my mind regarding the management of local scan accounts.Please feel free everyone to share your recommendations………………………….

2495
B
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Jun 9 - Jun 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021329 - Is BeyondInsight Password Safe affected by CVE-2024-6387 regreSSHion? KB0021689 - Web application freezes or hangs and credentials are not entered when application is configured to use AutoIT Passthru KB0021929 - How to configure Managed Account DSS key rotation KB0021981 - Configuration of proxy settings no longer works after upgrade to Password Safe 24.3 on-prem - Entra ID test password and change password fails KB0022039 - After upgrading to Password Safe 24.3, API call to get secrets using path is not retrieving the secret KB0022064 - Receiving error when attempting to delete account in User Management - Error generating access token in web console log file KB0022109 - Error when calling a Secrets Safe folder by folder id "[Error] (14) Microsoft.EntityFrameworkCore. Query An exception occurred while itera

240
GloriaB
BeyondTrust Employee
Arno
ArnoApprentice
asked in General
Custom Link

Hi everyone,  Is there a possibility to display a custom link on the registered website at Password Safe, which points e.g. to a helpdesk page? We have documented all the steps in a portal. End users should read the documentation before opening a ticket. Regards

141
H
BeyondTrust Employee
P
prasadp87Trailblazer
asked in General
Password rotation through API user

Hello All,I am looking for guidance for API script which used for password rotation of any managed account.We are currently using shell script for password rotation, but it seems failing for Invalid user/Password event though password fetch script is working fine for same user.If anyone has sample script, please share or if anyone knows pointer to develop new script for this requirement please help. Thanks,Prasad 

505
H
BeyondTrust Employee

Badge Earners

  • BCIE: Password Safe
    LuanCarneirohas earned the badge BCIE: Password Safe
  • BCA: Password Safe
    Shekharhas earned the badge BCA: Password Safe
  • BCA: Endpoint Privilege Management - Linux
    AndyBrithas earned the badge BCA: Endpoint Privilege Management - Linux
  • BCA: Privileged Remote Access
    Sumit Aggarwalhas earned the badge BCA: Privileged Remote Access
  • BCA: Endpoint Privilege Management - Mac
    Ellarthas earned the badge BCA: Endpoint Privilege Management - Mac
Show all badges
Terms & ConditionsCookie settings