Linux / Unix

Re-creating Certificates for EPM-UL This article outlines the steps to generate a new certificate for Endpoint Privilege Management for Unix and Linux (EPM-UL).  By default the service pblighttpd.service uses the certificate /usr/lib/beyondtrust/pb/rest/ssl/rest.pem. Admins can create another certificate and name it rest.pem to replace the current one.  Steps Generate the certificate Copy the pem file /etc/pbssl.pem to a backup location Extract the ISO contents of the version of EPM-UL to the /tmp directory (replace paths in the command with the correct version). This will create a new certificate pbssl.pem. For argument explanations, refer to pbregister.  pbregister -C -c /tmp/powerbroker/v23.1/EPM-UL_linux.x86-64_23.1.0-12/lib/libcurl.so.4.8.0 -s /tmp/powerbroker/v23.1/EPM-UL_linux.x86-64_23.1.0-12/lib/libcrypto.so.1.1:/tmp/powerbroker/v23.1/EPM-UL_linux.x86-64_23.1.0-12/lib/libssl.so.1.1 > pbssl.pem  Move this to the /etc folder. Restart the following EPM-UL services pbmaste

How to install EPM-UL agent on AIX using package installer Listed below is a summary of steps for installing the Endpoint Privilege Management for Unix and Linux (EPM-UL) agent on an AIX server using the package installer. In this article EPM-UL version 22.2 is used however, these steps are good for other versions of EPM-UL as well.  In the below example, a runhost and submithost are set up and there is already a primary policy server setup that will be specified.For further install instructions, please review AIX Install Procedure. Copy the following files to the /opt/  directory AIXSRV client PMUL_aix_22.2.0-07.tar.Z PMUL_aix_22.2.0-07_pkg.tar.Z Uncompress the files gunzip PMUL_aix_22.2.0-07.tar.Z gunzip PMUL_aix_22.2.0-07_pkg.tar.Z Make sure you are in /opt directory and extract the tar files: cd /opt/ tar -xvf PMUL_aix_22.2.0-07.tar tar -xvf PMUL_aix_22.2.0-07_pkg.tar This will create the powerbroker directory. Change the directory to the following: cd /opt/powerbroker/v22.2/PMUL_a

Onboarding Linux/Unix Servers and Local Linux/Unix Accounts. There are specific deployment steps required to onboard Linux or Unix systems, as well as local Linux accounts. See details below Pre-deployment steps to be done on the Linux or Unix machine You must create an account to be used as the functional account. This account can be a local account or an Active Directory account that can login to the Linux or Unix system. A functional account must be set up to change passwords and have elevated privileges. Elevated privileges can be set up for the functional account to use sudo, pbrun or pmrun.   You will need to create a scan account. Check the machine to see if there are any custom prompts or banners with the prompt character in them. If there is then you will need to make changes to the custom platform.   Workflow to add Systems and Accounts Create Address Group Login to Web console as a BeyondTrust administrator Navigate to Configuration > DISCOVERY MANAGEMENT > Addre

EPM Unix & Linux (UL) Supported Versions Lifecycle and OS Compatibility Information The tables below detail the operating systems that are fully supported and actively maintained for Endpoint Privilege Management for Unix and Linux (EPM-UL). These EPM-UL versions will be updated if necessary to fix problems with functionality and enhancements. In line with the other BeyondTrust products, EPM-UL releases are supported for 2 years from the initial Certified date. File names are structured as <Release Identifier>.tar.Z where the <Release Identifier> is pmul_<OS Version>-<Release Number>. Important: Before any clients are upgraded to the latest release, it's recommended that the license, policy, and log servers are upgraded to the latest release. EPM-L (SaaS) - Non-cached clients  EPM-UL Version Certified Date End of Support 25.1.4 May 2025 Apr 2027 25.1.3 Apr 2025 Apr 2027 25.1.2 Mar

How to Activate Policy Caching for EPM-UL Below are the steps to activate policy caching for Endpoint Privilege Management for Unix and Linux (EPM-UL) , to convert clients to cached clients. These steps are specific to clients and not servers and can only be performed on on-premise versions of EPM-UL. The SaaS version (EPM-L) requires a full build on the clients if switching. Note: These steps cannot be performed on the SaaS version (EPM-L, this will result in a conflict error"{noformat}# rpm -Uv ./epml-cachedclient.x86_64.rpmerror: Failed dependencies:epml-client conflicts with epml-cachedclient-25.1.0.04-1.x86_64epml-cachedclient conflicts with (installed) epml-client-25.1.0.04-1.x86_64{noformat}"the non-cached client will need to be uninstalled and reinstalled as a cached client.  Warning: It is strongly recommended to test this in a non-production environment first.  Ensure the EPM-UL server is set to allow caching.  This can be confirmed by checking the /etc/pb.settings file .  R

Introducing Pathfinder BeyondTrust is introducing Pathfinder, our new unified interface that brings together our powerful security solutions under a single login and integrated experience for operational agility that brings shared context across all our products. This interface will enable organizations to better manage identity security across their heterogeneous environments and ensure critical assets are protected from all angles. Security teams will benefit with a unified platform for faster incident response, intelligent recommendations, and streamlined workflows to reduce risks and gain operational efficiency. Managing cybersecurity in today’s complex threat landscape requires a comprehensive, integrated approach that enables security teams to effectively find, control, and protect all paths to privilege.  For more information, please check out our press release and platform page:BeyondTrust Pathfinder Delivers a One-Platform Approach to…Pathfinder Platform | BeyondTrust Latest A