Events
Groups
BeyondTrust University
Support Portal
Ideas Portal
BeyondTrust.com

Create topic
Login

Home
Community
Endpoint Privilege Management
Linux / Unix

Linux / Unix

A localized space to talk about EPM, specifically for Unix & Linux.

53 Topics
9 Replies

When you subscribe we will email you when there is a new topic in this category

53 Topics

Most replies

Most views

Newest first

BeyondTrust CommunicationsCommunity Manager

published in Linux / Unix

Monthly Buzz - April - Endpoint Privilege Management - Unix Linux

Secure default X509 certificates for all EPM-UL TLS communicationEndpoint Privilege Management for Unix and Linux 26.1Prior to v26.1.0, a customer could forego the use of their own certificates in favor of EPM-UL’s default self-signed certificates.Starting with v26.1.0, EPM-UL establishes a per-installation Public Key Infrastructure (PKI). The first (primary/license) server generates a self-signed Root Certificate Authority (Root CA) certificate, which becomes the trust anchor for the entire installation. Policy and log servers that can act as registration servers each receive a Subordinate CA certificate signed by the Root CA (or by another subordinate CA), and all servers and client endpoints receive individual CA-signed certificates for use in TLS communication. Certificate and hostname validation are now fully enforced for connections using these new certificat

140

4 days ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Apr 20 - Apr 27)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022371 - Unable to elevate with EPM-UL and sudo - Error 8523 Client failed to contact remote host

7 days ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Apr 13 - Apr 20)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022130 - Unable to use Sudo commands. Client licensing error - No space left on device

14 days ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Apr 6 - Apr 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023439 - Error after running profile task - Could not authenticate with PMUL REST API

21 days ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Mar 30 - Apr 6)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022139 - pbrun24.1.4-05[2730476]: Could not connect to run host

28 days ago

BeyondTrust CommunicationsCommunity Manager

published in Linux / Unix

Monthly Buzz - March - Privilege Management Unix Linux

How to Upgrade EPM-UL Using The BIUL U-series Web Console This article provides the steps to upgrade Endpoint Privilege Management for Unix and Linux (EPM-UL) through the U-Series appliance web console. This only applies to instances installed through the U-Series web console, and not those installed using the local Linux console. Pre-requisites Only the versions of EPM-UL that have been made available for BT Updater can be installed through the U-Series appliance web console. All masters in the environment should be upgraded and confirmed to be working before upgrading the client machines. Mismatching master node versions can lead to unexpected behavior. Log in to the BIUL U-series webconsole as an administrator (https://<u-series appliance>/pbsmc) Click Hosts Inve

130

1 month ago

Prudhvi KeertipatiGuru

asked in Linux / Unix

PMUL Policy Scripts: ACA

Hi everyone,I’m trying to use aca to block some commands after user switch to a root account using pbrun. But I’m not able to achieve it, below is the sample script I have. Please suggest the changes to effectively use aca to block commands.bash is an alias command to switch to root user. I can still run whoami command after switch to root.if (command == bash){aca("file", "/use/bin/whoami", "!all", "BLOCK");accept;} Thanks,

241

2 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Jan 12 - Jan 19)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023237 - EPM-UL shell or bash command error: 3430 Insecure operation. 3201.08 Exec of /bin/bash failed: Operation not permitted

160

3 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Jan 5 - Jan 12)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023225 - Does CVE-2025-9230 and CVE-2025-9232 affect EPM-UL?

3 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Dec 22 - Dec 29)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023181 - How to uninstall EPM-UL

180

4 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Dec 15 - Dec 22)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021758 - LDAP binding to Active Directory on EPM-UL fails with error - pbrun23.1.2-04[947719]: 3005 Request ended unexpectedly KB0021817 - Errors assigning EPM-UL license key - 3802.6 This host is not the Primary License server or 6025.78 Host is incorrect in the Registry Name Service Cache database

250

4 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Dec 9 - Dec 16)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023150 - EPM-L fails to activate "Error activating"

540

4 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Nov 24 - Dec 1)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0023106 - RPMS error "Service:5: Failed to add dependency on @pblighttpd_after@, ignoring: Invalid argument" KB0023109 - How to upgrade EPM-UL using the BIUL U-series web console

500

5 months ago

BeyondTrust CommunicationsCommunity Manager

published in Linux / Unix

Monthly Buzz - November - Privilege Management Unix Linux

370

5 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Nov 10 - Nov 17)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021510 - pblighttpd.service returns a failed state after it is stopped

160

5 months ago

BeyondTrust CommunicationsCommunity Manager

published in Linux / Unix

Monthly Buzz - October - Privilege Management Unix Linux

Getting and Deploying a New EPM-UL License File When purchasing a new Endpoint Privilege Management Unix or Linux (EPM-UL) license key, BeyondTrust will generate the license key based on the hostname and domain name. In some cases, the hostname or domain name can change. If this happens, users will need to request a new EPM-UL license file. To change the hostname to which the PMUL license key is linked, please download the attached PMUL License Request document listing the hostname, PBHostID, version, and the number of licenses to be assigned. Once this document has been filled out, please forward this to BeyondTrust's Fulfilment team by emailing

790

6 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Oct 20 - Oct 27)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021713 - pbuninstall uses high amount of memory and CPU and is not behaving correctly on Ubuntu18 KB0021749 - EPM-UL - Client registration or REST call fails error "Failed to call REST API - HTTP returned error" KB0023004 - pbrun command fails with UTMP and WTMP errors

140

6 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Oct 6 - Oct 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021714 - User assigned to a Role Based Policy in EPM-L is unable to use the policy KB0021725 - 6101.53 Error accessing Message Router statistics error in msgrouter and pb.eventlog is not logging in eventlog

580

6 months ago

BeyondTrust CommunicationsCommunity Manager

published in Linux / Unix

Monthly Buzz - September - Privilege Management Unix Linux

Re-creating Certificates for EPM-UL This article outlines the steps to generate a new certificate for Endpoint Privilege Management for Unix and Linux (EPM-UL). By default the service pblighttpd.service uses the certificate /usr/lib/beyondtrust/pb/rest/ssl/rest.pem. Admins can create another certificate and name it rest.pem to replace the current one. Steps Generate the certificate Copy the pem file /etc/pbssl.pem to a backup location Extract the ISO contents of the version of EPM-UL to the /tmp directory (replace paths in the command with the correct version). This will create a new certificate pbssl.pem. For argument explanations, refer to pbreg

140

7 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Sep 22 - Sep 29)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021676 - Error: pbguid Exiting failed to read settings file /etc/pb.settings - general SQL error "

420

7 months ago

Prudhvi KeertipatiGuru

asked in Linux / Unix

EPM-UL Registration Name Services (RNS) - Add Hosts to Service Group

Hi All,I’m trying to add clients/servers to the RNS Service Hosts but I’m not able to do it and I couldn't find relevant documentation around it. Can you please help. It is a dev environment, and I currently have 2 servers. First one is hosting all components and RNS. When I try to add servers or clients to the service groups. I don't find the other host. When I try to install the components using any of the default client registration profiles. Installation getting failed. Below is the installation err

711

7 months ago

Prudhvi KeertipatiGuru

asked in Linux / Unix

EPM-UL On-Prem Firewall Port Requirements

Hi All,Could you please clarify whether REST API port 24351 (pbrestport) needs to be configured for bidirectional communication between BIUL and all hosts (including the policy server and endpoints), or if it should be set up as unidirectional—from BIUL to all hosts, or from all hosts to BIUL? Thanks

621

7 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Sep 15 - Sep 22)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022889 - SSH connections fail using pbrun in profile.d scripts (VSCode) KB0022904 - EPM-UL install fails "Error this installation is for Privilege Management for Unix & Linux package creation"

200

7 months ago

GloriaBBeyondTrust Employee

published in Linux / Unix

Endpoint Privilege Management (Unix/Linux) - Knowledge Article Publications (Sep 1 - Sep 8)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021256 - EPM-UL pbbench fails with error 8523 Client failure in SSL_connect - Unable to initilize SSL to policy server KB0021403 - EPM-UL error - 3811.3 This server is not a License Server KB0021407 - How identify roles contains specific hostgroup for EPM-UL

260

7 months ago

BeyondTrust CommunicationsCommunity Manager

published in Linux / Unix

Monthly Buzz - August - Privilege Management Unix Linux

How to install EPM-UL agent on AIX using package installer Listed below is a summary of steps for installing the Endpoint Privilege Management for Unix and Linux (EPM-UL) agent on an AIX server using the package installer. In this article EPM-UL version 22.2 is used however, these steps are good for other versions of EPM-UL as well. In the below example, a runhost and submithost are set up and there is already a primary policy server setup that will be specified.For further install instructions, please review AIX Install Procedure. Copy the following files to the /opt/ directory AIXSRV client PMUL_aix_22.2.0-07.tar.Z PMUL_aix_22.2.0-07_pkg.tar.Z

200

8 months ago