Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Dec 9 - Dec 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023150 - EPM-L fails to activate "Error activating"

27 days ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Nov 24 - Dec 1)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023106 - RPMS error "Service:5: Failed to add dependency on @pblighttpd_after@, ignoring: Invalid argument" KB0023109 - How to upgrade EPM-UL using the BIUL U-series web console

100

1 month ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - November - Privilege Management Unix Linux

How to Upgrade EPM-UL Using The BIUL U-series Web Console This article provides the steps to upgrade Endpoint Privilege Management for Unix and Linux (EPM-UL) through the U-Series appliance web console. This only applies to instances installed through the U-Series web console, and not those installed using the local Linux console. Pre-requisites Only the versions of EPM-UL that have been made available for BT Updater can be installed through the U-Series appliance web console. All masters in the environment should be upgraded and confirmed to be working before upgrading the client machines. Mismatching master node versions can lead to unexpected behavior. Log in to the BIUL U-series webconsole as an administrator (https://<u-series appliance>/pbsmc) Click Hosts I

240

1 month ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Nov 10 - Nov 17)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021510 - pblighttpd.service returns a failed state after it is stopped

1 month ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - October - Privilege Management Unix Linux

Getting and Deploying a New EPM-UL License File When purchasing a new Endpoint Privilege Management Unix or Linux (EPM-UL) license key, BeyondTrust will generate the license key based on the hostname and domain name. In some cases, the hostname or domain name can change. If this happens, users will need to request a new EPM-UL license file. To change the hostname to which the PMUL license key is linked, please download the attached PMUL License Request document listing the hostname, PBHostID, version, and the number of licenses to be assigned. Once this document has been filled out, please forward this to BeyondTrust's Fulfilment team by emailing

590

2 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Oct 20 - Oct 27)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021713 - pbuninstall uses high amount of memory and CPU and is not behaving correctly on Ubuntu18 KB0021749 - EPM-UL - Client registration or REST call fails error "Failed to call REST API - HTTP returned error" KB0023004 - pbrun command fails with UTMP and WTMP errors

2 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Oct 6 - Oct 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021714 - User assigned to a Role Based Policy in EPM-L is unable to use the policy KB0021725 - 6101.53 Error accessing Message Router statistics error in msgrouter and pb.eventlog is not logging in eventlog

550

2 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - September - Privilege Management Unix Linux

Re-creating Certificates for EPM-UL This article outlines the steps to generate a new certificate for Endpoint Privilege Management for Unix and Linux (EPM-UL). By default the service pblighttpd.service uses the certificate /usr/lib/beyondtrust/pb/rest/ssl/rest.pem. Admins can create another certificate and name it rest.pem to replace the current one. Steps Generate the certificate Copy the pem file /etc/pbssl.pem to a backup location Extract the ISO contents of the version of EPM-UL to the /tmp directory (replace paths in the command with the correct version). This will create a new certificate pbssl.pem. For argument explanations, refer to pbreg

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Sep 22 - Sep 29)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021676 - Error: pbguid Exiting failed to read settings file /etc/pb.settings - general SQL error "

310

EPM-UL Registration Name Services (RNS) - Add Hosts to Service Group

Prudhvi KeertipatiGuru

asked in Linux / Unix

Hi All,I’m trying to add clients/servers to the RNS Service Hosts but I’m not able to do it and I couldn't find relevant documentation around it. Can you please help. It is a dev environment, and I currently have 2 servers. First one is hosting all components and RNS. When I try to add servers or clients to the service groups. I don't find the other host. When I try to install the components using any of the default client registration profiles. Installation getting failed. Below is the installation err

551

EPM-UL On-Prem Firewall Port Requirements

Prudhvi KeertipatiGuru

asked in Linux / Unix

Hi All,Could you please clarify whether REST API port 24351 (pbrestport) needs to be configured for bidirectional communication between BIUL and all hosts (including the policy server and endpoints), or if it should be set up as unidirectional—from BIUL to all hosts, or from all hosts to BIUL? Thanks

381

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Sep 15 - Sep 22)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022889 - SSH connections fail using pbrun in profile.d scripts (VSCode) KB0022904 - EPM-UL install fails "Error this installation is for Privilege Management for Unix & Linux package creation"

160

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Sep 1 - Sep 8)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021256 - EPM-UL pbbench fails with error 8523 Client failure in SSL_connect - Unable to initilize SSL to policy server KB0021403 - EPM-UL error - 3811.3 This server is not a License Server KB0021407 - How identify roles contains specific hostgroup for EPM-UL

220

4 months ago

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - August - Privilege Management Unix Linux

How to install EPM-UL agent on AIX using package installer Listed below is a summary of steps for installing the Endpoint Privilege Management for Unix and Linux (EPM-UL) agent on an AIX server using the package installer. In this article EPM-UL version 22.2 is used however, these steps are good for other versions of EPM-UL as well. In the below example, a runhost and submithost are set up and there is already a primary policy server setup that will be specified.For further install instructions, please review AIX Install Procedure. Copy the following files to the /opt/ directory AIXSRV client PMUL_aix_22.2.0-07.tar.Z PMUL_aix_22.2.0-07_pkg.tar.Z

150

4 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Aug 18 - Aug 25)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022740 - pbrun fails with error "Cannot access sharedlibsolarisprojects /usr/lib/libproject.so" KB0022781 - "3430 Insecure operation" error when installing epml-cachedclient or epm-client packages KB0022785 - Linux Server with Palo Alto firewall fail to connect with error 3003.01 Could no

400

4 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Aug 4 - Aug 11)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021406 - Is EPM-UL affected by CVE-2022-41556?

130

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - July - Privilege Management Unix Linux

Onboarding Linux/Unix Servers and Local Linux/Unix Accounts. There are specific deployment steps required to onboard Linux or Unix systems, as well as local Linux accounts. See details below Pre-deployment steps to be done on the Linux or Unix machine You must create an account to be used as the functional account. This account can be a local account or an Active Directory account that can login to the Linux or Unix system. A functional account must be set up to change passwords and have elevated privileges. Elevated privileges can be set up for the functional account to use sudo, pbrun or pmrun. You will need to create a scan account. Check the machine to see if there are any custom prompts or banners with th

720

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Jul 21 - Jul 28)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021379 - Does CVE-2024-6387 affect Endpoint Privilege Management? KB0022672 - pbevent.log is not updating

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Jul 14 - Jul 21)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022671 - EPM Cloud for Linux (EPM-L SaaS) clients do not show in the console after pbactivate has been run

680

BeyondTrust CommunicationsCommunity Manager

Monthly Buzz - June - Privilege Management Unix Linux

EPM Unix & Linux (UL) Supported Versions Lifecycle and OS Compatibility Information The tables below detail the operating systems that are fully supported and actively maintained for Endpoint Privilege Management for Unix and Linux (EPM-UL). These EPM-UL versions will be updated if necessary to fix problems with functionality and enhancements. In line with the other BeyondTrust products, EPM-UL releases are supported for 2 years from the initial Certified date. File names are structured as <Release Identifier>.tar.Z where the <Release Identifier> is pmul_<OS Version>-<Release Number>.

400

6 months ago

GloriaBBeyondTrust Employee

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Jun 9 - Jun 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022541 - Constrains violation when installing PMUL with RNS "4012.01 Failed set Host in Registry Name Service" KB0022544 - Is it possible to manage the password for pblight? KB0022549 - Why does the pblighttpd.log file need execute permissions?

110

6 months ago

GloriaBBeyondTrust Employee