General

Can BeyondInsight support LDAP for Role-Based Access? As we are unable to sync users once we have configured LDAP for authentication. we tried adding users through ldap in users and trying to authenticate, it does not work as well. Any guides or suggestions would be a great help

Functional Account test password is failing and so we are recieving the below error. Can anyone please help on this. Verify Managed Account on Active Directory system: Domain=UGNX.local, PreferredController=, UseSsl=True, EnforceCertificateValidation=True, Account=(AccountName=s_pr, DistinguishedName=, SamAccountName=s_pr, UserPrincipalName=s_pr@ugnx.local, DomainName=UGNX.local, Privilege=, SID=S-1-5-21-2902959944-561351360-3437842006-37045, DisableAtRest=False) FunctionalAccount=(AccountName=srv_BT_Win_FA, DistinguishedName=srv_BT_Win_FA, SamAccountName=srv_BT_Win_FA, UserPrincipalName=srv_BT_Win_FA@ugnx.local, DomainName=UGNX.local, Privilege=, SID=, DisableAtRest=False) Querying managed account attributes... Search attributes for SID=S-1-5-21-2902959944-561351360-3437842006-37045 ValidateActiveDirectoryCredentials - domain: 'UGNX.local'; username: 's_pr'; useSsl: 'True'; domainController: 'UGNX.local'. Ignore Errors=False, Trust First Certificate=False Subject=CN=U

Dear all, A question: The ssh authentication on MAC (MacOs) is working via BeyondInsight\Password. What are the settings for authentication in the Mac graphical interface via PAM?I received this information below, where my developer team said that they would like to perform this entire process via PS/BI:"In step 1 - SSH would be enough for developers to install tools that depend on the terminal and run the build of iOS apps and perhaps unit tests in previously configured projects. In a slightly more complicated way, it would also be possible to submit apps to the Apple store. This submission requires a MAC device and is usually done via xCODE or the Transporter app, which are visual, but it is possible to submit through the configuration of tools such as Fastlane.In step 2 - Some configurations of Apple's iOS projects need to be done via xCODE, which is essentially visual. Development and debugging via xCODE and simulation of apps in the iOS simulato

The following articles were published last week. New Knowledge Base Articles: KB0021387 - Unable to login to web console when user is in child domains - Logon user missing permissions and roles - Directory Queries do run against the parent domain KB0021502 - What best practices should be done for on-premise appliance implementation? KB0021630 - Password Safe SSH fai

how to onboard multiple ubuntu VM's over the XRDP

Hello, What is the list of reasons the PasswordSafe Session Manager utilizes high CPU, other than well known the SCP protocol issue in version 23?Because its often behavior in PasswordSafe and multiple customers are complaining about it.

I am trying to search accounts in Password Safe.  I am looking for accounts that are just admin but I have accounts that are netadmin as well that are showing.  Is there a way to do an exact match when searching in Password Safe?  I tried ‘admin’ and “admin” with no luck.

The following articles were published last week. New Knowledge Base Articles: KB0021165 - How to add SAP as a Managed System KB0021570 - How to onboard an Oracle Database hosted on Amazon Relational Database in Password Safe Cloud KB0021599 - What clustered databases are supported?

ErrorEnd user facing “Managed system, account or application not found” error while launching the application sessions, also all the configurations are fine from PAM.Please, share your thoughts to over come.

The following articles were published last week. New Knowledge Base Articles: KB0021620 - Is 24 hours the minimum time a password can be rotated? What options are available for change password frequency? KB0021660 - Editing an Active Directory user in User Management error - There are one or more invalid fields KB0021678 - Unable to delete Inactive Scans from the web

We would like to onboard the windows servers present in Azure. so we would like to sync Azure with Password Safe. Is it possible. If yes please let us know the steps to do.

We have stored the secrets in Beyondtrust Password safe and calling those secrets via Beyond trust API. This secret contains the single backward slash and in the Beyond trust API is escaping it by double backwardslash .  This secret is been used for encryption and decryption already the setup /configuration is been done they cannot change the key now. How to handle this?

Could you please help us to identify whether we have synthetic monitoring feature available in our current support of Site24x7 or not?

The following articles were published last week. New Knowledge Base Articles: Password Safe Secrets Cache for Linux step-by-step for configuring, testing and troubleshooting After upgrading unable to edit Smart Rule receive error "An error occurred while retrieving the Smart Rule details." Is it possible to integrate both Privilege Remote Access (PRA) and Remote Supp

how we can create bulk local users under the user management in password safe

Hello,We had an Active Directory account was managed (onboarded) and we don’t know how it got onboarded. Are there any reports or audit logs that can help to find out who or what smart rule did the onboard? Thanks,

The following articles were published last week. New Knowledge Base Articles: Can Password Safe External Credential Storage for Discovery Service Now work with domain accounts? SAML PingOne IDP receiving error - Unable to process the SSO request Error: The password change was cancelled. Unable to generate a random password using the current password attributes

What is the recommended rollback steps for physical UVM appliances when doing BI or appliance management component upgrade.

If the domain managed system is onboarded in PAM and the local accounts is mapped with the domain managed system then which functional account will be used to domain or local functional account? does it need any additional permission on managed system?

Is there a way to change our managed admin accounts password rotation to every 4 or 6 hours? We don’t want our admin passwords to rotate after release, and are thinking 24 hour rotation may be too long of a gap.

Sometimes in organization there is requirement of providing access to one user of only server for specific time period only.How it is possible to automate the process of on demand access using smart rule in Password Safe?This is the biggest challenge as we have to create a separate managed account, group and smart rule for such access.I need a process where I can define that after specific time the access is revoked automatically and there is no dependency of password safe administrators. 

does anyone have any recommendations for service account? I have them on boarded based on Directory Query looking for members of an AD group called Interactive logon. they are onboarded but I need to link them to Managed system and present them only to the users that have access to the server they are linked to. I have an Idea on how to do this but it is not pretty. 

Password Safe Discovery Scanning Workflow  

Did you know Password Safe has a feature called Secrets Cache which can be leveraged in a DR/Outage situation to retrieve last known passwords for important break-glass accounts? This is extremely helpful when administrators are unable to access Password Safe. If communication with Password Safe is lost, the cache will provide the last known good managed account credentials even if the associated request has expired.In order to set this up, there are some roles and permissions that need to be configured for the user running the Secrets Cache. More details around requirements can be found here: https://www.beyondtrust.com/docs/beyondinsight-password-safe/ps/cache/requirements.htmIf you're using Password Safe and you haven't checked this feature out yet, I strongly encourage you to check out the user