General

Hello,We are coming up to our certificate renewal, and I noticed that the BeyondTrust documentation states “You do not need to create a new certificate request”, and to provide the original CSR if the CA doesn’t already have it.  See DigiCert documentation, “Best practice is to generate a new CSR when renewing your SSL/TLS certificate. This creates a new, unique keypair (public/private) for the renewed certificate.”  Why would BeyondTrust, a company developing security products, recommend a less secure process? Am I misunderstanding something, or should the BeyondTrust documentation follow industry best practices for renewing certifi

Hi! Is there a way to see to which traffic node a specific jump client is connected right now?Either remotely, in the console or directly on the client?

The following articles were published last week. New Knowledge Base Articles: KB0022174 - Best practices for Remote Support and Privileged Remote Access KB0022301 - Integration Client does not work and retrieved no data KB0022447 - After upgrading to 24.3.2 or 25.1.1, the agent displays grey. "Service not available". Error in log: invalid binary path of peer

Has anyone else’s Remote Support appliance been going down constantly?  Our cloud appliance which is on 25.1.1 has been going down multiple times per week since upgrading.  We’ve opened numerous tickets and Support has been dead silent on the issue for weeks now.  Just curious if anyone else is experiencing issues with Remote Support 25.1.1Having no insight to the backend is proving it difficult to explain to our end users and leadership why this keeps occurring especially during business hours.

The following articles were published last week. New Knowledge Base Articles: KB0021283 - How to configure Remote Support for representatives for integration with PortalGuard KB0022421 - Is the IP address assigned to the RS or PRA Cloud instance static? Can it be provided? KB0022428 - RDP Jumps failing when using xRDP or FreeRDP "Unknown connection error. 2001C"

The following articles were published last week. New Knowledge Base Articles: KB0021833 - How to enable in-session two factor authentication in Remote Support and Privileged Remote Access KB0022201 - Managed System external Jump items are missing KB0022264 - How to turn PID logging on and off for RS and PRA on Mac or Linux systems

When a Jump Client is deployed I thought there was a way to specify the system should be in “unattend” mode when it is locked or logged off.  In other words, if the computer is locked or logged off, the user would not have to accept the request for remote access...it would be granted automatically.  BUT, when the user is logged in, that user would have to accept the request or remote access would not be granted. Unfortunately, I cannot find that setting.  Or maybe I am way off and it never existed…  Thanks!

The following articles were published last week. New Knowledge Base Articles: KB0021363 - Network Tunnel jumps cause Jumpoint host inaccessibility KB0022386 - How to remove the link to chat transcripts on the page that appears after a session ends (Post-Session Landing link) KB0022393 - Is Local Jump supported for Linux Server OS?

How to avoid or get rid of duplicates in Beyond Trust Password safe?

The following articles were published last week. New Knowledge Base Articles: KB0021333 - Cannot change the name of a traffic node in Remote Support or Privileged Remote Access "Internal Server Error" KB0021344 - Unable to communicate with Jump Clients or security providers in IP ranges 172.17.0.0/16 or 172.18.0.0/16 after upgrading to Base 7.0 KB0022324 - Where is t

Would it be possible to search the rep console by email address? i would think that the jump client would need to gather this information and upload it to the appliance.   

The following articles were published last week. New Knowledge Base Articles: KB0022284 - Linux Jumpoint installation error - Failed at step EXEC spawning /home/beyondtrust/jumpoint/init-script: Permission denied KB0022312 - How to set up a CNAME with Remote Support in Pathfinder KB0022322 - Can RS or PRA failover be configured so a specific appliance automatically re

we are moving some customers/colleague to also use Windows 365 and of course sometimes they might need some support. The situation is that the majority of our staff and also IT levels do not have admin rights at all on their workstations as the workstations and W365 are full Intune managed and in Autopilot USER-Mode. The way we currently do support and where admin level is required is to use BTRS to take over the device and elevate prompts through the magic wand options. The problem arises with Windows 365. The agent runs fine on the background and we see it also active in the representative consol, however when using the JUMP to access the workstation, the user is not getting any prompts to allow the representative access to the workstation most likely due to the nature of W365 being basically an RDP session. I've tried doing it the other way around by sending a code to the user and they key this in in the session URL and then we do get access to the device, ho

The following articles were published last week. New Knowledge Base Articles: KB0021303 - Auto update of a headless jump client on Linux ARM devices fail and leaves the device disconnected in Remote Support KB0021318 - Sorry, the rep name or id provided is incorrect error when joining a Remote Support session via Teams KB0022237 - After upgrading to 25.1.1, cannot sen

The following articles were published last week. New Knowledge Base Articles: KB0020807 - Remote Support security scanner CSP directive issue - missing reporting-objective and form-action-objective KB0021299 - Remote Support Cloud Security provider will not save settings "Connection Agent Unavailable" KB0022212 - Unable to copy and paste from the Web Console

Do you still have uncertainties about how to configure Group Policies?  💻🔐 Dive into our Interactive Workshop to learn about our Best Practices and put your knowledge to the test!  🧠💥 Title: Remote Support: Managing Group Policies Interactive WorkshopDate: 20 May 2025Time: 8 am Eastern and 1 pm UK and 8 pm SGTDuration: 90 minutes  Workshop Aim: This Interactive Workshop aims to test participants on their knowledge on how to manage Group Policies and the permissions in a set scenario.  Learning Objective:  At the end of this session, you will have been tested on adjusting, creating and managing  Group Policies by following a scenario environment given to you. You will also understand where permissions need to be changed for users depending on the type of access they need.

The following articles were published last week. New Knowledge Base Articles: KB0022170 - Untrusted certificate warnings when using an RDP jump item KB0022174 - Best practices for Remote Support and Privileged Remote Access KB0022194 - How to create a registered app for Remote Support and Privileged Remote Access Vault

I’m seeking assistance to help untangle the mixture of BeyondTrust versions I have installed on our Windows devices. I’ve updated our appliance to verion 25.1.1, but our deployments still show verions 24.3.1 and 24.3.2 in our environment.  There are a lot of “Upgrade Pending” devices that I haven’t been able to resolve with the suggested methods of restarting the BeyondTrust service.  The Service appears to start, but quick stop again.  Do I need to create a task sequence that tries an update within the short window that the service is running?I feel like a complete uninstall is the best route forward, but my manual attempts to do so have not resulted in any positive results. 

We are having an issue where newly installed jump clients are not appearing in the representative console.  I filed a support request two days ago but have had no response.  I enabled debug logging on the client but there isn’t anything there that seems wrong.Anything else I can check on our end?

Experienced an unusal incident in which a support user had a unexpected session appear in their queue with the customer name displaying as “ Threatlocker” the support user stated that they had not sent out a support link / key to any clients or was expecting any kind of support connection . At first they thought it could have been a prior client re-opening a old bomgar file. But after verifiying logs can confirm that the prior client’s name was different than “Threatlocker” . Also to note the support user did not interact with the session and attempted to remove the session by right-clicking but was diabled.The session did eventually disconnect on its own. Upon reviewing the logs it seemed that the “threatlocker” cilent was commenting in the session a repeated message over and over again even after a “disconnected” state. I am thinking this could have been a bot of some sort. This instance only happened once and did not reappear . I attempted to do a generic search online to see if

The following articles were published last week. New Knowledge Base Articles: KB0021294 - How to integrate BeyondTrust Remote Support/Privileged Remote Access with Google for SAML Authentication KB0022108 - Privileged Remote Access and Remote Support 25.1 operating system certification matrix KB0022140 - Error when accessing security tab after software upgrade - An un

The following articles were published last week. New Knowledge Base Articles: KB0022140 - Error when accessing security tab after software upgrade - An unexpected error occurred KB0022149 - Android Jump Clients prompt to allow screen casting "Exposing sensitive info during casting/recording"

The following articles were published last week. New Knowledge Base Articles: KB0022114 - How to add IP address and name to hosts file KB0022125 - Is Remote Support and Privileged Remote Access Affected by CVE-2025-27636 ? KB0022127 - What is the default driver location for new databases on SQL server?