Skip to main content

Privileged Remote Access

Create identity-secure, just-in-time access to all your enterprise environments: cloud, on-premises, and OT.

113 Topics
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Jan 20 - Jan 27)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021304 - Error installing a jump client on Ubuntu 24.04 failed to untar to unpack directory KB0021310 - System Restore option is not working in Special Actions in the Windows customer client KB0021338 - Jump Client icon and menu issues in Ubuntu 24.04 KB0021605 - How to remove a user in Remote Support and Privileged Remote Access KB0021964 - Jump client shows offline error "service not available" in the system tray KB0021973 - Remote Support and Privileged Remote Access 24.3.1 releases paused KB0021974 - Why is there scheduled maintenance stating - "Your SRA Cloud site is not appropriately sized for its usage level"?

310
GloriaB
BeyondTrust Employee
A
AnilreddyApprentice
asked in General
Local Linux accounts password rotation in PRA

HI Everyone, I have onboarded the local Linux accounts in PRA. But am looking for password rotation via PRA for non domain joined Linux accounts. Does any one have idea about local Linux accounts password rotation in PRA. If yes please suggest me on this. Thanks and looking for your quick support.

1634
C
B
BruceRApprentice
asked in General
PRA Web Jump - Downloads from website

Hi, we have a web jump to an internal finance sytem that can generate reports. Is there a way to allow the download of these reports ? ThanksBruce

1044
P
BeyondTrust Employee
B
bt101Veteran
posted in General
Log Retention Period for Session Recordings

Just trying to see what is your current data retention period for Session Recordings. I understand this depends on various factors - compliance requirements, deployment size/usage , cost-benefit, Org maturity level   etc. But posting this to get a sense of how other users are managing it . We have around 60-90 days live on appliance, plus another 90 days on a network share. As the usage increases the session recordings data is growing exponentially. But at the same time investigations may require some historical data as well. 

1132
B
S
ssethurajanApprentice
asked in General
X window forwarding using the X11

Vendor user is facing issues while trying to launch a shell jump session (via Jumpoint) from Mac endpoint. User is typing the below command to invoke the web console on the shell jump session but getting display error. Target Endpoint: Rocky Linux 8.9, 64-bitsystemctl enable --now cockpit.socket~]$ DataEditorError: DataEditor: Can't Open Display They also want to know if PRA shell jump supports X window forwarding using the X11 protocol. Any suggestions to resolve this problem?

841
P
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Jan 13 - Jan 20)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021305 - Missing expiry time for SSH-CA account in Vault checkout KB0021319 - "BT" Command Shell Display setting not saving correctly KB0021794 - Privileged Remote Access and Remote Support 24.3 OS certification matrix KB0021871 - Error "Memory swapping could indicate that this appliance is undersized for current workload" in /appliance KB0021941 - TCP Tunnel, Web Jump and Remote RDP connection types show as unavailable after upgrade KB0021943 - Not able to login with LDAPS Security Provider - Failed to test the provider

270
GloriaB
BeyondTrust Employee
B
badbeagleNewcomer
asked in General
pra V24.3 mapped network drives

The What’s New document said “Our zero trust Network Tunnels are capable of enabling mapped network drives for Windows workstations, so you can extend PRA’s centralized identity security controls to the entirety of your generalized networking needs. Trash that VPN!” Has anyone looked into this or tested it?  Tried searching the KB and technical docs but haven’t discovered anything yet.

801
DavidC
BeyondTrust Employee
S
samiTrailblazer
asked in General
PRA Deployment Questions

Hi everyone. Appreciate your feedback on the below queries.For PRA Cloud what is the communication matrix (firewall ports) that needs to be allowed for Jump Points, Jump clients and PRA to work smoothly?   For PRA Jump Points, what is the recommended hardware sizing (CPU, Memory, Disk) etc ?   Where the session recordings going to be stored? Is it going to be on the Jump Point or PRA cloud and in case if its going to be on the Jump Point what is the requirements for Disk storage?

20510
P
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Jan 6 - Jan 13)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021908 - Jump Clients are stuck pending upgrade after upgrading Remote Support or Privileged Remote Access to 24.3.1

630
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Dec 30 - Jan 6)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021323 - No Jump Items found match the search criteria message shows before showing the search results KB0021861 - Sync Error "Not available. Verify if the provider is enabled and it supports the requested operation."

370
GloriaB
BeyondTrust Employee
S
samiTrailblazer
asked in General
PRA Questions

Hi Everyone.I am new to PRA and have few questions that I would like to clarify. Appreciate your feedback on these.When we have PRA Cloud and On-Prem Jump Cluster deployed. Does the Jump clients communicate to PRA cloud via the Jump Points or they make a direct outbound connection to PRA cloud by default?    Typically each Jump Point handles around 25 concurrent connections? Are they also storing any session recordings locally? typically what should be the specifications for the Jump server for a mid size org like (CPU, Mem and Disk)? Is there any sizing calculator that we can use or some assumptions to take into consideration when determining the resources required for sizing the Jump Point?   If we have AWS and On-Prem servers, Can we do segregation for Jump Points? Like for Azure environment, deploy a Jump cluster there that would be specifically used to access servers deployed in Azure and Deploy another On-Prem Jump cluster that would be typically used to access servers deployed o

1582
P
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Dec 23 - Dec 30)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021297 - Generic tokens and SSH accounts excluded from rotation summary message during bulk account rotation KB0021337 - Secure Remote Access Appliance certificates disappear after uploading a new one KB0021628 - Session termination behavior is not working in Privileged Remote Access and users are still appear as logged in after a session ends KB0021815 - Web Jump is timing out on Linux endpoint unable to produce logs

190
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Dec 16 - Dec 23)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021448 - OAuth email configuration error - Test email failed. Unknown error occurred ... [Code 451] or There was an error processing your request KB0021530 - The save filter option in the RS Rep Console or PRA Access Console and how to use it KB0021791 - Privileged Remote Access 24.3 feature static username and port sessions setting KB0021815 - Web Jump is timing out on Linux endpoint unable to produce logs KB0021843 - Is Remote Support and Privileged Remote Access compatible with Windows 11 ARM devices?

1280
GloriaB
BeyondTrust Employee
V
Venkata OduriNewcomer
asked in General
Default browser for Web Jump method

I would like to know which default browser BeyondTrust is integrated for the web jump method. Is there any default browser for this method, or does it utilize the browser from the Jumpoint server?

1372
L
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
posted in General
Match naming of the SRA Console User and Password Safe User

Context: Once Password Safe and SRA are successfully integrated. One of the reasons for SRA user fail to search for the managed systems from Password Safe is the mismatch of the naming of the SRA Console User and Password Safe User. In most cases, your Password Safe User has a domain name included in the username but where as SRA user has the short name.Below is one of the method to fix the username matching for SRA SAML2 and/or SCIM security providers. It is useful for the Password Safe Cloud and SRA Cloud instances where customer doesn't have access to backend configuration.  Solution: For example if username in Password Safe is domain.com\username or username@domain.com. To match the username in SRA Console, Navigate to /login console, Go to Users & Security → Security Providers → Edit SAML2 or SCIM Providers. Expand User Attribute Settings, Edit the Username filed. If you are getting the domain.com as an Domain attribute in SAML2 or SCIM claims. Update Username filed as below:

671
J
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Dec 2 - Dec 9)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021764 - Privileged Remote Access 24.3 feature show all Password Safe (PS) items in a Jump Point KB0021780 - SEC_ERROR_EXPIRED_CERTIFICATE error when accessing appliance through Firefox browser KB0021788 - Do the following HAProxy CVEs affect Remote Support or Privileged Remote Access? KB0021791 - Privileged Remote Access 24.3 feature static username and port sessions setting KB0021794 - Privileged Remote Access and Remote Support 24.3 OS Certification Matrix KB0021808 - Vault interface not pulling in Password Safe connected credentials through ECM integration when executing SQL Tunnel in Privileged Remote Access KB0021820 - How to restrict access to /appliance

1110
GloriaB
BeyondTrust Employee
R
rp-natApprentice
asked in General
PRA - Anyone use Cloudflare successfully?

Hello,We have put Cloudflare (DNS Proxy) infront of our domain for PRA.This works fine 99% of the time, however, occassionally, users experience minor “blips” where the desktop console will close/re-open (remaining logged in).After talking with our SE and support alot on the issue, they cant tell me whether they have other customers using Cloudflare with DNS proxy successfully.They state that reverse proxies are unsupported (which i understand, its in the docs), however, unsupport != shouldnt work.Just trying to understand whether the issue is the same across other orgs.

1724
R
Prudhvi Keertipati
Prudhvi KeertipatiVeteran
asked in General
PRA - Jumpoint - RDP Service Account for Session Forensics

Hi,We have Password Safe and PRA integrated and we are using Jumpoint for Remote Jump. For Session Forensics functionality, Is there a way to get the RDP Service Account credentials from Password Safe instead of creating the account in PRA Vault? Thanks,Prudhvi

952
Prudhvi Keertipati
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Nov 25 - Dec 2)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021560 - What is FIDO2 and how to enable it for Remote Support and Privileged Remote Access KB0021779 - NET::ERR_CERT_INVALID error when accessing appliance through Chrome browser KB0021796 - Unable to retrieve available endpoints -- Details: Search term [*] is not allowed; allowWildcardOnlyEndpointSearch must be 'true' in the appSettings section of the ECM config KB0021809 - How to upgrade Endpoint Credential Manager (ECM)

220
GloriaB
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Nov 18 - Nov 25)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021298 - Vault account unavailable stuck in rotating state "The selected account is queued for rotation. Please try again later." KB0021626 - Privileged Remote Access and Remote Support 24.2 OS Certification Matrix KB0021786 - Privileged Remote Access 24.3 feature start sessions with an entire Jump Group by right-clicking

240
GloriaB
BeyondTrust Employee
T
TZoltanRising Star
posted in General
BeyondTrust PRA Atlas Deployment

Hi,Are there any members who are using BeyondTrust PRA as an Atlas Deployment?Do you have any connectivity / stability problems? I mean slow connection establishment, “connection timed out” errors.We use it and many users have this kind of problem, when they are connected internally.If you have met this kind of problems what was your experience, how did you manage to solve it? :) 

642
T
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Nov 11 - Nov 18)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021754 - Privileged Remote Access 24.3 feature Jumpoints deployable through Docker container

80
GloriaB
BeyondTrust Employee
L
LeeAtkinsonRising Star
asked in General
Certificate Warnings

When connecting to a target using Remote RDP in PRA Cloud, we are encountering certificate warnings. I understand this is expected when using self-signed certificates. However, if connecting to a server with a CA-signed certificate issued by the organisation, these warnings should not appear.Could anyone clarify: What steps are required to ensure CA-signed certificates are properly recognised during RDP connections? Do we need to provide BeyondTrust with a CA-signed certificate, or is this entirely dependent on the operating system’s certificate store on the user’s device?Additionally, the documentation states that certificates stored in the operating system are trusted. Does this refer to the certificate store on the user’s local machine, or the machine where the Jumpoint resides?

3112
L
J
Jsizzle45Apprentice
asked in General
Jump Clients offline/Software uninstalling

I login to Beyond Trust yesterday and see 2 machines offline. I login today and there are 10Not only is the machine offline, but the app has been removed. Is there a reason this keeps occurring? Is there a time limit to have it installed? I reference back to this article where support linked it to an update, but no update has occurred.   

2553
P
BeyondTrust Employee
GloriaB
BeyondTrust Employee
GloriaBBeyondTrust Employee
published in General
Privileged Remote Access - Knowledge Article Publications (Nov 4 - Nov 11)Weekly KB Publications

The following articles were published last week. New Knowledge Base Articles: KB0021594 - How to make Intel vPro work with Remote Support and Privileged Remote Access KB0021687 - How to clean up Uninstalled or Lost status Jump Client endpoints in RS or PRA KB0021693 - Jump Client screen share graphic issue (artifacting) when no monitor is connected to the machine (headless) - Not refreshing screen KB0021731 - How to get connection agent logs for Remote Support or Privileged Remote Access KB0021737 - How to use group policies and session policies to apply permissions in Secure Remote Access

290
GloriaB
BeyondTrust Employee

Badge Earners

  • BCA: Endpoint Privilege Management - Windows
    jchewhas earned the badge BCA: Endpoint Privilege Management - Windows
  • BCIE: Password Safe
    ravi.bisramhas earned the badge BCIE: Password Safe
  • BCIE: Privileged Remote Access
    ravi.bisramhas earned the badge BCIE: Privileged Remote Access
  • BCA: Endpoint Privilege Management - Windows
    omarmohy98has earned the badge BCA: Endpoint Privilege Management - Windows
  • BCIE: Password Safe
    Emre Yardimcihas earned the badge BCIE: Password Safe
Show all badges
Terms & ConditionsCookie settings