Skip to main content

Privileged Remote Access

Create identity-secure, just-in-time access to all your enterprise environments: cloud, on-premises, and OT.

102 Topics
P
BeyondTrust Employee
Phillip LBeyondTrust Employee
published in General
Customer Success Quarterly - 2025-Q1 - Privileged Remote Access

 Greetings! I'm Phillip Lehner, the Senior Director of Education at BeyondTrust, and I'm thrilled to lead our efforts in delivering exceptional learning experiences. I'm excited to share how we're elevating your journey with a new, streamlined method of accessing training: Success Included with BeyondTrust University.      At BeyondTrust University, we believe our customers deserve nothing short of excellence in the tools they use. That’s why we’ve launched 'Success Included' — to elevate your learning experience and ensure you achieve success with BeyondTrust’s solutions.  Success Included is an education program that makes foundational knowledge accessible to customers at no additional cost. It features easy-to-follow, self-paced eLearning courses that empower system administrators to configure and manage BeyondTrust products using industry best practices. Our goal is to equip learners with the knowledge needed to maximize the value of their investment with BeyondTrust. Because your

330
P
BeyondTrust Employee
Sean Cashin
BeyondTrust Employee
Sean CashinBeyondTrust Employee
published in General
BeyondTrust Remote Support SaaS Service Security Investigation

As a result of our investigation into the Remote Support SaaS Security Incident detailed in our Security Advisory (link below), we have proactively completed an update for our Secure Remote Access (Remote Support and Privilege Remote Access) Cloud customers, fortifying the security of their solution overall. More information can be found as it becomes available via the Security Advisory on our website found here. Please note that we have updated the security investigation as of 28-Jan-25, 5:45 PM Eastern Time. Please follow the link for additional details.

5655
Sean Cashin
BeyondTrust Employee
T
tsipesNewcomer
asked in General
Accessing SRA API

This may have been asked already.  I have been working in the APIs for PWS with no issue.  Moving over to SRA, I cannot get the connection to work.  Tells me it is not allowed.  I have the account and API client/secret encoded.  I am using Powershell and tried it with/without the -Method POST option.  My code is $AuthKey = "Basic MyBase64Key"$AuthURI = "https://OURSITE.beyondtrustcloud.com/oauth2/token"$headers = @{ Authorization=$AuthKey}$Response = Invoke-RestMethod -URI $AuthURI -Header $headersWhat in the name of the sake of sanity am I missing?  Once I get this I know the rest falls into place. TIA

40
T
A
AndyHTrailblazer
asked in General
Questions Regarding PRA Failover Implementation

Hello,I am currently implementing PRA failover using the guide available at BeyondTrust PRA Failover Documentation, and I have a few questions that I hope you can help with: I’ve attached our network diagram. Based on the failover guide, it seems that the only applicable method for our setup is DNS Swing. This is because the two appliances are located in separate data centers with different IP schemas, making the Shared IP method unfeasible. Additionally, since the data centers have different public IP addresses, NAT Swing would not work either. Could you please confirm if my understanding is correct? Regarding DNS Swing: When the primary PRA fails, do I need to manually log in to the DNS server and update the domain name to point to the backup PRA's public IP address? Do I also need to log in to the backup PRA to change its role to primary, and conversely, log in to the original primary PRA (once recovered) to switch its role to backup? The guide mentions the following no

193
T
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Apr 14 - Apr 21)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022212 - Unable to copy and paste from the Web Console KB0022228 - User cannot see credentials for injection Returning 0 credentials - Password Safe integration is not working.

20
GloriaB
BeyondTrust Employee
A
ArnoNewcomer
asked in General
Enhance performance for PRA

Hi Community,Is there any experience that latency times increase as longer as a PRA appliance runs?Subjectively, we have the impression that the PRA connection is getting slower, even within the sessions.Are there ways of measuring this objectively?What can be done to improve it? More RAM in the jump points or something similar? RegardsArno

383
Kenny Lyman
BeyondTrust Employee
R
Rohit NikamApprentice
asked in General
Issue with BYOT Option – Remote RDP Sessions Terminating

Hello,I am experiencing an issue with the Bring Your Own Tool (BYOT) option when attempting to open a Remote RDP session using an external tool. For some endpoints, the session initiates but terminates within 1-2 seconds. This behavior is inconsistent, as it works fine for other endpoints.Could you please assist in identifying the cause of this issue and suggest a resolution?

926
I
M
mjhallVeteran
asked in General
Updating the Jump Client

Is there a command line we can run on machines to prompt them to update the jump client? i.e.: Simulate right clicking on a jump client in the representative console and clicking update?  We just updated our site software, and I am wondering about the best way to slowly rollout the jump client updates. Generally, the process we take would be updating the IT department, the business pilot, then start staging it out to production. We deploy our jump client via the generic .msi install. There are a couple methods that I can think of, but each has their downsides. Selecting jump items through the console and clicking “Update”. Downsides: This would take forever to manually do for a few hundred pilot machines Deploying via the Jump Client Auto Update settings. Downsides: No control over who gets the updates Deploying via the .msi installer. Downsides: You must uninstall the old version, then install the new version (This resets all of the audit history for that jump client instance ID)What

5524
T
J
BeyondTrust Employee
Johnli AzucenaBeyondTrust Employee
posted in General
Privileged Remote Access: Group Policies Interactive Workshop

Hop on and join our interactive workshop, where you can gain hands-on experience and handle different use case scenarios. Title: Privileged Remote Access: Group Policies Interactive WorkshopDate: 29 April 2025 Time: 9 am Eastern and 2 pm UK and 9 pm SGTDuration: 90 minutes  Workshop AimThis interactive workshop enables participants to learn the aim and process of configuring Group Policies in Privileged Remote Access. There will be an opportunity to collaborate and study a Use Case to configure a Group Policy within a virtual test environment.  Learning Objective:Learn how to create and configure Group Policies in Privileged Remote Access according to best practices. In this session we will cover:Why would you use Group Policies?     How do users get assigned?     What does Group Policy control?     Best practice guidance     Defined and Final Settings Click here to enroll!For more information on workshops or to make suggestions, please navigate here.

250
J
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Apr 7 - Apr 14)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021931 - How to create a team in Privileged Remote Access KB0022170 - Untrusted certificate warnings when using an RDP jump item KB0022174 - Best practices for Remote Support and Privileged Remote Access KB0022194 - How to create a registered app for Remote Support and Privileged Remote Access Vault KB0022195 - Error: This account has expired when trying to log into the administrative interface

110
GloriaB
BeyondTrust Employee
L
lineVeteran
asked in General
Integrate SQL management studio with credential injection on PRA

Jump SQL management studio with credential injection on PRA

1315
B
A
AndyHTrailblazer
asked in General
Document not found error when browsing /login

I tried to access my PRA /login page but got “Document not found” error. I followed https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&table=kb_knowledge&sys_kb_id=1d533ad2471ce290b77b3ddbd36d43d9&searchTerm=document%20not%20found but it doesn’t help.I still couldn't see any sites in the default site drop down list. Please help. thanks, 

755
P
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Mar 31 - Apr 7)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021294 - How to integrate BeyondTrust Remote Support/Privileged Remote Access with Google for SAML Authentication KB0022037 - Web Jump no longer working with new VMWare versions when using "Enhanced Authentication Plugin" (EAP) KB0022108 - Privileged Remote Access and Remote Support 25.1 operating system certification matrix KB0022140 - Error when accessing security tab after software upgrade - An unexpected error occurred KB0022141 - Web jump error: failed with exit code 2 KB0022143 - Version 24.3.2 fails when installing on some Ubuntu distributions. Error GLIBCXX_3.4.30' not found KB0022157 - Error approving access for others. The approver key is invalid KB0022161 - Authenticate the current url icon is greyed out when Web Jump is launched KB0022168 - File transfer completes with errors but fai

120
GloriaB
BeyondTrust Employee
C
Carlos MendonçaRising Star
asked in General
Credential injection remote PRA WEB Jump

Hello,I'm having trouble with the credential injection feature in the web jump section. It doesn't fill in and even selecting the options and looking at the documentation isn't working. Is anyone else having the same problem?

726
C
E
edwinb77Apprentice
asked in General
group policy assignment not the same

We currently have a support group linked with a group policy and in turn session policy where the group policy is updated with members through SAML import from our EntraID. This generates the authorized access for all the members in this support group to all our devices. I'm currently trying to set up another group where we have only a few members in that gets access granted to devices that are allowed unattended access meaning no prompt when taking over the device. However whatever I apply and change, the account that is in the main SAML import group and now added to the unattended access policy as well, keeps the prompt when taking over the device and it seems that the main support group keeps overruling the unattended policies. Done some digging and when I use a local account (actual BT consol) and when entering this user account, I have a nice overview in the membership detail with priority. However when I look in the account that is imported through SAML, I don't see this overview

201
R
BeyondTrust Employee
B
bt101Veteran
asked in General
PRA web jump credential injection times out

Hello, we have set up PRA web jump for multiple websites including some Cisco device GUIs. With Cisco DNA / Catalyst center website it is timing out. This website uses HTML tags that change for each page refresh. Based on the jump point logs , PRA successfully detects the tags for username, password and submit button but at the end it gives credential injection timed out error. We have the timeout set to max value of 30 seconds. PRA version is 23.1.2. If we select no credential the website opens fine as PRA web jump. I can log in by manually entering the password. The webpages before and after login are different\. (I see a KB that says it may timeout of URL doesnt chnage after password injection). I read in another post that the ‘inject credentials in current URL’ doesn’t work for web-jumps .Is there any workaround method using PRA. Like RDP to a server , open browser and click on inject creds button. Or anything needs to be changed in web jump backend config on jump-point which can p

311
Lindsay Gallant
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Mar 24 - Mar 31)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022117 - Can SQL tunnels be created for multiple instances of a SQL database? KB0022140 - Error when accessing security tab after software upgrade - An unexpected error occurred KB0022149 - Android Jump Clients prompt to allow screen casting "Exposing sensitive info during casting/recording"

150
GloriaB
BeyondTrust Employee
E
edwinb77Apprentice
asked in General
BT jump client post install tags and possible other options

In our situation we currently create 1 BT jump client MSI installer which we then package and add to our Intune environment for deployment on all our workstations (approx 40k) From the consol perspective it is then just 1 big pool of devices and all our IT and support presentatives can access the workstations where required to provide the needed support. We are currently reviewing this strategy to reduce this visibility initiating RBAC like we also do in our Intune environment where many especially device visibilities are reduced due to applying scope tags and in turn apply security groups which limits the views of our IT. This of course is something we should/could do in BT, however there is no such rule or something available that if device starts with USLT or DELT it will be assigned to X group policy/session policy and then linked to the allowed representative and learned that this is initiated through the client itself hosting the tags and optionsWe've learned that you can add tag

222
E
A
AndyHTrailblazer
asked in General
PRA update stuck at 99%

I am trying to update our PRA on-prem instance but it stuck at 99% for almost 3 hours now. What is solution for this? The screenshot is below:Thank you!

1797
A
J
Juan IslaNewcomer
asked in General
PRA Failover configuration on AWS provision appliances

Has anyone had any challenges When configuring Failover with a shared IP on AWS Cloud host Manager appliances. We previously had Virtual appliance provisioned in VMWare (Failover configuration worked properly) and moved to AWS cloud host, since then Failover configuration does not seem to work. Wonder if we should have any additional setting in AWS or if there are any caveats to the Failover settings in Cloud-hosted PRA appliances.

1112
T
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Mar 17 - Mar 24)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0022045 - Windows 11 24H2 - RDP graphics issue - Little colored squares over everything (screen artifacting) KB0022114 - How to add IP address and name to hosts file KB0022116 - Web Jump option missing under Access Permissions section KB0022125 - Is Remote Support and Privileged Remote Access Affected by CVE-2025-27636 ? KB0022127 - What is the default driver location for new databases on SQL server? KB0022131 - The Organizational Unit (OU) is missing from the CSR request in /appliance KB0022133 - Unable to create new Jump Client. Error - The total number of deployable Jump Clients for this site has been reached

150
GloriaB
BeyondTrust Employee
S
SolBApprentice
asked in General
PRA - Auto backup

Hi,I am looking for an article/reference/document that could help me setup a backup for PRA software configuration automatically. This means, I am planning to set a schedule to backup the PRA software. Any thoughts and help are greatly appreciated!  Thank you.

764
P
BeyondTrust Employee
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
Jump Shortcut Import Wizard Missing

In the PRA Cloud 23.3.4 instance, Jump Shortcuts Mass Import Wizard  is missing under Jump Items. Is there any configuration or setting has to be enabled for this wizard to show? Thanks,Prudhvi

1864
L
M
MarcusHApprentice
asked in General
No update notification emails

Hello,We have a BeyonTrust PRA OnPremise Virtual Machine (latest version). We have admin email configured in the /appliance settings, and test mails are successful. But we do not receive emails when a new version is available.How can we be notified when there is an update available?Thanks in advanceMarcus

263
M
A
alexsilvabunkerApprentice
asked in General
PRA Vault

Team, what are the platforms that are supported for password rotation using the PRA Vault?Does it support Linux, Windows (Ad and Local), and Network Devices (i.e Fortinet, Cisco, etc)? I didn't find the list of supported platforms in the Beyondtrust documentation.​​​​​

832
C

Badge Earners

  • BCA: Endpoint Privilege Management - Windows
    Hakasehas earned the badge BCA: Endpoint Privilege Management - Windows
  • BCA: Endpoint Privilege Management - Mac
    Hakasehas earned the badge BCA: Endpoint Privilege Management - Mac
  • BCA: Remote Support
    Hakasehas earned the badge BCA: Remote Support
  • BCA: Endpoint Privilege Management - Mac
    joselopezhas earned the badge BCA: Endpoint Privilege Management - Mac
  • BCA: Password Safe
    gnajerahas earned the badge BCA: Password Safe
Show all badges
Terms & ConditionsCookie settings