Privileged Remote Access

We have an in/out board application we want to present to domain users through beyondtrust when offsite. In testing the user logs in to beyondtrust with domain credentials, and then is prompted again 2x on the website.  Internally it tries sso with logged in user, then prompts if user not found. Is there way to run the web jump as the domain user that logged into PRA so they don’t have to re-enter username and password?  Or any other way around that?

The following articles were published last week. New Knowledge Base Articles: KB0021317 - Unable to login to Remote Support or Privileged Remote Access after adding certificates to a clustered LDAP provider "Failed to authenticate with 'password' using provider [4]: Unable to bind" KB0022055 - Domain discovery error - Failed to get information about discovery account KB0022075 - Unable to RDP - How to troubleshoot RDP KB0022081 - Approval emails for sessions have stopped working error - STMP error [450] Service unavailable KB0022085 - How to disable session recordings KB0022093 - Canned scripts with multiple files fail "Cannot find initialization file at... Please specify a valid initialization file"

How to Import using jump shortcuts for Network Tunnel, we do not have any template for that.

almost every attempt on web jump times out. changing the Authentication Timeout works but next time have to changed it again and again.some URL launched but appears as below. checked outside PRA URL is working fine. 

Hi, I’m alooking for some example around the btapi.exe usage. Command lines are pretty understandable and usable with options and arguments but I don’t know the file format for inputs. Apparently we can use json format or key=value format but I have never been succeeded to provide inputs to command as “add user”.If somebody can provide me a json file example to create local users through btapi it will be wonderful :)

Has anyone moved from cloud-hosted PRA instance to on-prem virtual or physical appliance ? or vice-versa. Was there any significant difference noticed on remote access session performance - jump clients , RDP using JumPoint. I know many factors will impact this but lets say PRA user and remote server both are on-prem and PRA appliance is moved from cloud to on-prem. Theoretically, there should be performance improvement. Trying to see if this is worth the time and effort , if someone has already done it :-)

Hi team Do you know if SQL tunnel support connection to multiple instance of the same SQL Database ?Customers can configure SQL Server Tunnel jump items to connect to the default instance but how does a customer configure a SQL Server Tunnel jump item to connect to databases installed on non default SQL server instances? Is this even supported?

Hello,I have a Windows 2022 Jumpoint. I tried to create a group policy but found the “Web Jump” option is missing on “Access Permissions” section. Anyone knows why? Thanks, 

On Ubuntu 24.04, the PRA console freezes when attempting to load the credential injection screen. When this happens, the process becomes completely unresponsive, requiring a manual termination. I’ve tested multiple PRA versions, and the issue occurs in all of them. Is anyone else experiencing this behavior, or does anyone know how to fix it?

Could multiple users connect to the same Jump client? Windows RDP has 2 users limitation. Does it also apply to Jump client? Thanks,

The following articles were published last week. New Knowledge Base Articles: KB0021306 - Issue clearing Windows clipboard sync on jump client KB0021309 - Jump Clients in a Jump Zone Proxy show online but some timeout when starting a session KB0021327 - Remote Sessions with Android TV - buttons do not work as expected KB0022060 - How to install an update set for RS or PRA in ServiceNow KB0022065 - Unable to install Jumpoint on Debian 11 OS. Error - PUSH_AGENT:ERROR exception occurred while connecting to gateway KB0022071 - Accessing Jump items is slow

Hello, we imported the PRA on-prem appliances to the DMZ, downloaded the console but the console uses a pre-defined hostname that came from the BeyondTrust license email. Would it be possible to change this hostname to match our naming conventions? Thanks,

Guys, hello! I created a script that gets a Managed Account from Password Safe and creates the same account as a Vault Account on the PRA or if the account already exists, just update the password, description and vault group which the account should belong.Its something we are using in some enviroments that have both PS and PRA, that way the user does not have to manually request the password to use in a Tunnel Jump, as the native integration is not compatible with credential injection.

after upgrading to 24.3.2, we are facing issues jump approvals.if Jump policy is set, it doesn’t appear in console. Shows ‘None’ if it’s applied and requester sends request, Approver doesn’t receive notification.  Anyone facing such behavior or I’m I missing something. 

can anyone tell the usage of the key Icon appears when a web-jump is launch which says ‘Authenticate the current URL’ ?

We have 50+ jump clients that are showing in an Active [Upgrade Pending] state and are inaccessible.  The devices are on the network, pingable, and I’m able to open a remote PowerShell session on them using enter-pssession, however, they’re not completing the jump client upgrade process. I’ve been able to get a few to complete the upgrade after forcing multiple reboots.  In two cases I had to gain physical access and uninstall the old client and manually install the new one.Is anyone else seeing these issues?

is there any known issues in PRA 24.3.2? we are planning to upgrade.

The following articles were published last week. New Knowledge Base Articles: KB0022041 - After upgrade to RS or PRA version 24, outbound events for Service Now integration receive error: Maximum file exceeded KB0022051 - /login interface page times out after 10 minutes

Hello, how are you?I'm new to the community and I see several very relevant topics. We recently acquired Password Safe and PRA to use integrated and we intend to use Jumpoint for Remote Jump, so this is all still very new. Would anyone like to exchange knowledge and support for these features? I'm available to contact you.

I’ve created a jumpoint cluster with jump zone proxy enabled. When I create a jump client installer, I am unable to select the jumpoint cluster as the jump zone proxy. It says: “There are no standalone Jumpoints with proxying enabled.” I am on the latest version of PRA and clustered jumpoints with jump zone proxy should now be supported.Any ideas please? 

Hi All,Can someone provide me more information on changing the MTU on /appliance, what communication does it affect in an Atlas env.? Does it only affect the packets in communication between Traffic Nodes and the Primary or it affects also the client communications?Thanks for any answer.

The following articles were published last week. New Knowledge Base Articles: KB0021991 - Email alert "No Data Syncs Are Being Pulled" KB0022012 - Unable to RDP Jump when using diacritics with Linux Jumpoint - Authentication failed error KB0022018 - How to schedule a Remote Support or Privileged Remote Access update "install later" KB0022020 - High CPU usage and performance issues with BYOT and session recording after upgrade KB0022022 - Password reset emails are not sending receive error: Reset password email not sent. The SMTP server responded with: connection timed out. KB0022045 - Windows 11 24H2 - RDP graphics issue - Little colored squares over everything (screen artifacting)

With PRA Clipboard Sync - Automatic option and bidirectional sync, looks like clipboard history also gets synced. (We are working on disabling the clipboard history) but is there any way to configure the settings such that only copy-paste works when PRA user does ctrl+c ctrl+v . With clipboard auto sync, when PRA User initiates a session , user who is present locally (at console) of the machine can do ctrl+v or windows+v to see all the contents of PRA User’s clipboard. I know clipboard sync literally means it will sync but isn't it a risk. Also, can we triggere a script or action when PRA user closes the session that will clear the clipboard. This is useful e.g. when PRA user uses a privileged account to connect to IT network share from end user’s machine using their privileged credentials which they copy-paste into end user’s machine

Hi,As we know, a Jumpoint server supports remote RDP, SSH, and Web Jumps to machines within the same network. Therefore, it is generally recommended to have a separate Jumpoint for each network.Given our setup:We have servers in both Azure and On-Prem environments. We have an ExpressRoute connecting Azure and On-Prem, providing a private connection between the two environments.Considering this private connectivity, do we still need separate Jumpoints in both Azure and On-Prem? Or, can we deploy a single Jumpoint in Azure, ensuring it has the necessary permissions and network access to establish RDP and SSH connections to On-Prem servers?Looking forward to your insights.