Skip to main content

General

A general place for Password Safe conversations.

  • 228 Topics
  • 548 Replies
227 Topics
N
naidu_jstsTrailblazer
asked in General
How to Control Concurrent session to BT Console (passwordsafe) not referrring to managed accounts

How to Control Concurrent logins to Beyondtrust Passwordsafe? Example: If a user is trying to login using his laptop to bt passwordsafe console and if goes and logs in to another machine that should logout the other session and making this active session. Can we do this in BT passwordsafe?

381
J
BeyondTrust Employee
K
kgujasApprentice
asked in General
BI Password Safe networking

  Password safe physical appliane comes with 4 network cards. It is possible to have more than one network card in virtual appliance? Can we have more IP adressess for one network card in virtual appliance? If yes, where can I found the documentation? Thanks.

332
K
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Break-Glass Scenario Best Practices for Password Safe Cloud

Hi Team,I’m looking for a best practices and BeyondTrust recommendations for break-glass scenarios in the Password Safe Cloud? Please share your suggestions/advice?-Prudhvi

1262
Prudhvi Keertipati
A
AmilaKRising Star
asked in General
How to map non-shared manage accounts to User Group

Hi Guys, How can we achieve below use case ?"There are four members in the firewall team have their own manage accounts(Non-AD Accounts). Customer want to create one user group to grouping these members. When one member login to the PAM ,he should be able to view hist credential/manage account only." 

985
rhagerm
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Jan 6 - Jan 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021872 - Secrets Cache pspca logs error "A timeout occurred" KB0021909 - What AD permissions should a bind account or directory credential have? KB0021912 - Unable to SSH to Cisco switches version ISO 17.12 or higher within Password Safe . Error: SSH client: No Matching MAC algorithm found KB0021926 - How to onboard VMware Vsphere ESXi SSH into Password Safe KB0021932 - When using PS_automate version 24.3, launching web application with the Microsoft Edge Browser fails. KB0021935 - What is the difference between the Change Password menu option and the Schedule Change button on the Managed Accounts page?

360
GloriaB
BeyondTrust Employee
M
mitesh.nanduApprentice
asked in General
Password Safe || Nutanix OVA

We are uploaded OVA file in Nutanix Platform via Prism Console, post booting VM we are getting Boot device not found. Please install an operating system, or play 2048.We kept disk as a first boot, still we are getting same error message while booting VM.Package Name: 2024-R06-Win22-Ntnx-SF.ovaNutanix Version: 6.5.3.6 LTS Has anyone has done Password Safe deployment on Nutanix Platform. 

10911
Paulo144
C
Cygnus-x1Rising Star
asked in General
Cloning U-Series Appliance

Hi,We have 2 U-Series Virtual Appliances in Active/Active mode with an external SQL Server database.Our cybersecurity team needs to have a clone of our BeyondTrust setup. Is it possible to clone and have a working setup while also running the actual setup?What will be the major challenges/obstacles to overcome?Would highly appreciate any help/guidance.Thanks

1854
MikeK
R
RahulBApprentice
asked in General
How to manage local scan account and functional account step by step

Hello Everyone, I can understand the logic behind the automatic password rotation of local functional account even if we have new server onboarded using same first functional account credentials, but it is untested. i am trying to test it and update it once done. Regarding the Local scan account i actually do not have any idea that how can we manage it (Using enable scanner on managed account i know but what if we have onboarded 100 servers and now we need to scan 100 more and the scan account is using old credentials on remaining 100 servers also if i need to perform the scanning on old scanned assets?)There are lots of questions in my mind regarding the management of local scan accounts.Please feel free everyone to share your recommendations………………………….

1944
R
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Dec 23 - Dec 30)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021262 - Report in CVF format has offset columns - Columns are misaligned for records KB0021741 - Can Password Safe rotate Google Workspace Managed Accounts? KB0021829 - How to integrate Google Cloud Platform (GCP) and onboard accounts into Password Safe version 24.3 KB0021853 - Deploying a SQL free or SQL-less U-Series appliance shows duplicate names for Session Agent and password changes not occurring KB0021884 - BeyondInsight Password Safe Licensing FAQs

290
GloriaB
BeyondTrust Employee
B
bpkothariApprentice
asked in General
Prevention of sensitive info ON Workforce Password Manager UI

On user interface there are many fields which allows users to enter clear text info. We have seen users adding passwords, secrets, credentials entering these fields which also get stored as clear text in DB. We want to stop / prevent users submitting such info from UI. 1) How do we configure / control this? 2) How do we change label of such fields to warn users not to enter such info 3) How do we add a custom banner to warn / alert users not to enter sensitive info anywhere in WPM / Secret Safe / Password Safe? We were able to add similar banner in ERPM PI. We need such customization for Password Safe / WPM and Secret Safe.

441
N
BeyondTrust Employee
B
bpkothariApprentice
asked in General
Migration of Personal Vault from ERPM PI to Workforce Password

We are moving from ERPM PI to Workforce Password Manager (24.2.1.104). To have easy adoption of WPM, its important for us to provide some migration utility from PI to WPM during initial setup. It will be really bad for us to go back to end users telling we are moving to new product and now you migrate your own accounts to new product after using ERPM PI for years. What are the various options (partial or full migration). We need this to plan adoption strategies.

351
P
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Dec 16 - Dec 23)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021462 - Error: Password Safe does not support WinSCP client using the SCP protocol. Try again using SFTP protocol" and the connection does not proceed KB0021722 - Auto Shrink setting creating database locks affecting performance KB0021806 - High availability fails after upgrade "Process stopped due to error. The remote server returned an error: (500) Internal Server Error" KB0021827 - Users are not able to ssh from Password Safe with AD account when using Centrify SSHD service KB0021846 - Onboarding Managed Accounts or Assets via a Smart Rule issue - Disassociation from DC when directory query is used KB0021849 - Error "An error was reported. Please contact an administrator if the issue persists" when running reports KB0021851 - Unable to upload SSL Certificate: "Error occurred while importing SSL Certificate"

540
GloriaB
BeyondTrust Employee
P
prakash.rApprentice
asked in General
Is there a database for BeyondTrust Password Safe latest Vulnerabilities?

Hi there,I'm trying to get the latest vulnerabilities for BeyondTrust Password Safe (PS). I found this link: https://www.beyondtrust.com/trust-center/security-advisories, but the last advisory for Password Safe seems to be almost six months old.Is there a database or mailing list/RSS feed that provides more up-to-date vulnerability information for this solution?

732
P
C
Cygnus-x1Rising Star
asked in General
Assign Access Policy to a Specific Application

Hi,How can I assign an Access Policy to a specific application only?Thanks 

1218
C
V
Varuns29Apprentice
asked in General
Password Safe Cloud RDS Server Architecture & Port Requirements

Hello Guys, I’m new to BeyondTrust world but have fair understanding of PAM architecture.I’m trying to understand the RDS server role in the Password Safe Cloud architecture. The current architecture shared by BT emphasises on Resource Broker and thats where I have clear understanding of Resource Broker from application & network perspective. However, RDS Server is not covered in detailed in any document or article. I only understand that RDS Server is required for session management for non RDS/SSH connections. But, where does it fit in the architecture?I assume the flow of Database session management may look like:End user Workstation -→ Resource Broker (TCP/4489)  -→ RDS Server (TCP/3389)   --→ Database (e.g. TCP 1521/1433) I’m keen to understand below points with respect to RDS Server:Network requirements for RDS Server. Does it connect to any other component (PS Cloud) except Resource Broker & target system (DB etc.) Does RDS Server store the session recording temporarily?

3275
V
R
rimeda201Apprentice
asked in General
RDS Error on application

Hello, i’ve created an application via Remote Desktop Services using AutoIT that use $CmdLine[1] and $CmdLine[2] for user and password, when will execute on CMD with “C:/locate.exe user password” work’it, but, execute direct with double click appear the message “Array variable has incorrect number of subscripts or subscript dimension range exceeded” and same thing happen when i execute within Password Safe… whats happen? Theoretically, Password Vault will enter the user and password automatically...

1572
R
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
BeyondInsight / Password Safe - Knowledge Article Publications (Dec 9 - Dec 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021692 - Can TOTP be used with WinSCP Direct Connect? KB0021699 - Unable to delete Address Group error KB0021708 - Webconsole redirect issue after upgrading to 4.2.1 Appliance Management - repair attempt fails with Fatal Error during Installation KB0021829 - How to integrate Google Cloud Platform (GCP) and onboard accounts into Password Safe version 24.3 KB0021832 - How to confirm if DNS name or IP address is being used for password management. KB0021838 - How to manage Smart Rule permissions using the Smart Rule Management feature  

230
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
posted in General
BeyondTrust Product Update Server changing from Imperva to CloudFlare

Starting December 18, 2024, the BeyondTrust Product Update Server will change from Imperva cloud protection to CloudFlare cloud protection.  To receive updates, you must add the Cloudflare IP addresses to your firewall allow lists. To view the list of IP addresses, refer to https://www.cloudflare.com/ips/.  Additionally, if using domain allow listing, the below can be used: *.cdn.cloudflare.net.

320
GloriaB
BeyondTrust Employee
R
rimeda201Apprentice
asked in General
Managed Account via Smart Rule

I'm trying to manage AD accounts via Smart Rule, however, I select Directory Query and then when I select the domain nothing comes back, I've already added the domain in “Domain Management”, what else could it be?

726
R
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Password Safe Cloud - Splunk Cloud - SSL/TLS Error - Failed to Open Connection

Hi Team,As per the below KB article, for SSL/TLS connection error, we need to import Splunk certificate chain to U-Series Appliance and disable the client authentication check on BI Configuration.How to fix SSL/TLS connection for Password Safe Cloud, because we don't have access to backend U-Series Application and BI Configuration? BeyondInsight / Password Safe - Splunk Test Connector error: "Failed to open connection" - Splunk test script

1183
Prudhvi Keertipati
A
AndrewApprentice
asked in General
Single Sign on Experience via Remote Desktop services when a session started via password safe

I have a windows 2019 server enabled with RDS services and password safe for users that need to have privileged access to cloud apps that are onboarded as enterprise apps in Entra / Azure. How can i give users a single on sign experience when they do not have access to the account password? I am trying to avoid published apps and keep my admin overheads as low as possible.Has any here been able to make this happen? I had something running to support this when we had ADFS, but sadly we have moved on.

2052
A
S
SFARising Star
asked in General
RDCMAN tool bulk import connection strings

Anyone has setup RDCMAN tool ( the microsoft remote desktop manager tool) for multiple servers via script or csv? We have 1000 servers to configure, any way to do automate the import or the connection string configurations?

852
S
N
NectarNinjaApprentice
asked in General
Everything about LDAPs and more...

Hi everyone, hope y’all having a great holiday season so far! We’ve been reading non stop KB0017007 and could not get to work the LDAPs with the rotation of accounts. All of this was detected by a customer that captured the traffic between Password Safe and their AD and saw the credentials when the appliance rotated the passwords. We tried every extention of Certificates (PBX,Cert,etc) and nothing could seem to work, so I come forward asking for some experience from everyone. Best practices say the UVM should not not be added to the AD (due to possbile GPO issues and other), and the customer uses a “*.customer.com” (wildcard) certificate for their whole roster of Servers, dont know how that pans out here. Ports are ok, so far. So, connectivity issues are the least to check for now. What are your experiences when Configuring and Enabling this feature? any tips and tricks or additional information are highly thanked. Kind regards.

1184
rhagerm
U
udohsNewcomer
asked in General
How to Determine Beyond Insight Appliance uptime

Were do you go to see the Password Safe UVM Appliance/ Beyond Insight total uptime

361
G
BeyondTrust Employee
frank.colvin
frank.colvinVeteran
asked in General
Appliance locking out AD account.

2 of our 5 appliances are locking my AD account. The lockouts of my ad account are coming from these two serversthese appliances are not domain joined.The only time I use my ad account on these servers is:to log into the web UI. to map network drives to move files on and off.This started back in April and wound up turning them off. turned them back on a week and a half ago and deleted the btadmin profile and that seemed to clear up the problem. then earlier this week I had to map a network drive to get files on and off the appliance and it started happening again. when I map the drives I do not save my password nor do I set it to reconnect on login but something on the appliances is locking my account out.we have checked the credential manager and there are no passwords there. we have checked the net use command and there are no persistent mappings. we have searched through the registry and there are no entries tied to my AD account.I tried deleting the profile again but this time it d

10911
J
BeyondTrust Employee

Badge Earners

  • BCA: Endpoint Privilege Management - Windows
    CDashhas earned the badge BCA: Endpoint Privilege Management - Windows
  • BCIE: Password Safe
    Kyle_Labharthas earned the badge BCIE: Password Safe
  • BCA: Privileged Remote Access
    alexsilvabunkerhas earned the badge BCA: Privileged Remote Access
  • BCSE: Identity Security Insights
    Mason.Woodshas earned the badge BCSE: Identity Security Insights
  • BCIE: Endpoint Privilege Management - Windows
    BPopovhas earned the badge BCIE: Endpoint Privilege Management - Windows
Show all badges
Terms & ConditionsCookie settings