Privileged Remote Access

The following articles were published last week. New Knowledge Base Articles: KB0021560 - What is FIDO2 and how to enable it for Remote Support and Privileged Remote Access KB0021779 - NET::ERR_CERT_INVALID error when accessing appliance through Chrome browser KB0021796 - Unable to retrieve available endpoints -- Details: Search term [*] is not allowed; allowWildcardOnlyEndpointSearch must be 'true' in the appSettings section of the ECM config KB0021809 - How to upgrade Endpoint Credential Manager (ECM)

The following articles were published last week. New Knowledge Base Articles: KB0021298 - Vault account unavailable stuck in rotating state "The selected account is queued for rotation. Please try again later." KB0021626 - Privileged Remote Access and Remote Support 24.2 OS Certification Matrix KB0021786 - Privileged Remote Access 24.3 feature start sessions with an entire Jump Group by right-clicking

Hi,Are there any members who are using BeyondTrust PRA as an Atlas Deployment?Do you have any connectivity / stability problems? I mean slow connection establishment, “connection timed out” errors.We use it and many users have this kind of problem, when they are connected internally.If you have met this kind of problems what was your experience, how did you manage to solve it? :) 

The following articles were published last week. New Knowledge Base Articles: KB0021754 - Privileged Remote Access 24.3 feature Jumpoints deployable through Docker container

When connecting to a target using Remote RDP in PRA Cloud, we are encountering certificate warnings. I understand this is expected when using self-signed certificates. However, if connecting to a server with a CA-signed certificate issued by the organisation, these warnings should not appear.Could anyone clarify: What steps are required to ensure CA-signed certificates are properly recognised during RDP connections? Do we need to provide BeyondTrust with a CA-signed certificate, or is this entirely dependent on the operating system’s certificate store on the user’s device?Additionally, the documentation states that certificates stored in the operating system are trusted. Does this refer to the certificate store on the user’s local machine, or the machine where the Jumpoint resides?

I login to Beyond Trust yesterday and see 2 machines offline. I login today and there are 10Not only is the machine offline, but the app has been removed. Is there a reason this keeps occurring? Is there a time limit to have it installed? I reference back to this article where support linked it to an update, but no update has occurred.   

The following articles were published last week. New Knowledge Base Articles: KB0021594 - How to make Intel vPro work with Remote Support and Privileged Remote Access KB0021687 - How to clean up Uninstalled or Lost status Jump Client endpoints in RS or PRA KB0021693 - Jump Client screen share graphic issue (artifacting) when no monitor is connected to the machine (headless) - Not refreshing screen KB0021731 - How to get connection agent logs for Remote Support or Privileged Remote Access KB0021737 - How to use group policies and session policies to apply permissions in Secure Remote Access

Anyone know if it’s possible to present web jump in mobile screen format for the phone PRA client?  In my testing it comes up almost unusable as it tries to present it like it’s a monitor. Use case:Internal web app for in/out board and tracking staff location in the field.  There is a mobile phone view if they are on internal network.  Would like to make available using the iphone/android PRA client app when users are off network.

Hello everyone!I would like to know if anyone knows of any methods for automating the sending of session reports in Privileged Remote Access via email.Thank you in advance!

The following articles were published last week. New Knowledge Base Articles: KB0021628 - Session termination behavior is not working in Privileged Remote Access and users are still appear as logged in after a session ends KB0021718 - Checking for RS or PRA updates fail on Base 7.0 and lower

The following articles were published last week. New Knowledge Base Articles: KB0021611 - Jump Client not connecting to virtual machines

Before I raise an enhancement request, am I right in thinking that there is no other to view jump approvals for an approver other than via email? An approval tab in the interface would be a very useful enhancement - albeit one I’m surprised isn’t already there. Approvers wont be using the Access Console in this case...

If you create a discovery of endpoints, add them to a jump group, and the jump items are subsequenrtly deleted (for whatever reason), is there a way for them to reappear in a discovery scan?

The following articles were published last week. New Knowledge Base Articles: How to perform on-premise SRA appliance to cloud migration  

I have added a generic account into the PRA Vault. I am a Vault administrator and have added a func account. I am trying to manually rotate the generic account I have added but there is no optionn to rotate password (unlike the functional account which has this option).Any ideas how I do this?

It seems like a simple task to achieve as many other platforms offer this.  Just a simple email alert that a jump client went offline rather than having to login and check to see if your systems show online.  Any ideas when this will happen or it did and I am missing something?

Running: Privileged Remote AccessI have this issue where Jump Clients randomly go offline. The when going to the apps and features the app is gone and has been uninstalled. For instance, Saturday (9/14) I upgraded the appliance From 24.1.4 to 24.2.3Strangely 60 machines were still connected and upgraded the jump client to the new version automatically. 40 were offline. The 40 offline showed that 21.1.4 had been uninstalled. The new version never got installed. What is really quit frustrating is that when I redeploy the jump client, it shows up as a new machine. Now I have the same machine in there twice, one online and one offline. Because its a new machine, I have to re-add the machine to 5 jump groups, I lose all my logging and recordings, I have to reset the password vault matching. Its a real pain. Why cant beyondtrust match MAC addresses or serial numbers or something so that when I have to redeploy it matches the machine already in my system. I tried to restart the appliance, but

Does anyone else have something which, may seem like a small detail / config settings / set up but seems to provide big returns or work around a particular challenge? For example, I use end point automation to check a particular version of software across multiple end points - saves logging in to each system individually.