The front panel of the One Identity Safeguard for Privileged Passwords 4000 Appliance, 3000 Appliance and 2000 Appliance contain the following controls for powering on, powering off, and scrolling through the LCD display.
-
Green check mark button: Use the Green check mark button to start the appliance. Press the Green check mark button for NO more than one second to power on the appliance.
|
Caution: Once the SPP Appliance is booted, DO NOT press and hold the Green check mark button. Holding this button for four or more seconds will cold reset the power of the appliance and may result in damage. |
-
Red X button: Use the Red X button to shut down the appliance. Press and hold the Red X button for four seconds until the LCD displays POWER OFF.
|
Caution: Once the SPP Appliance is booted, DO NOT press and hold the Red X button for more than 13 seconds. This will hard power off the appliance and may result in damage. |
- Down, up, left, and right arrow buttons: When the appliance is running, the LCD home screen displays: Safeguard for Privileged Passwords <version number>. Use the arrow buttons to scroll through the following details:
- Serial: <appliance serial number>
- X0: <appliance IP address>
- MGMT: <management IP address>
- MGMT MAC: <media access control address>
- IPMI: <IP address for IPMI>
Table 12: Appliance LCD and controls
Green check mark button |
Use the Green check mark button to start the appliance. Press the Green check mark button for NO MORE THAN one second to power on the appliance.
|
Caution: Once the SPP Appliance is booted, DO NOT press and hold the Green check mark button. Holding this button for four or more seconds will cold reset the power of the appliance and may result in damage. | |
Red X button |
Use the Red X button to shut down the appliance. Press and hold the Red X button for four seconds until the LCD displays POWER OFF.
|
Caution: Once the SPP Appliance is booted, DO NOT press and hold the Red X button for more than 13 seconds. This will hard power off the appliance and may result in damage. | |
Down, up, left, and right arrow buttons |
When the appliance is running, the LCD home screen displays:
Use the arrow buttons to scroll through the following details:
- Serial: <appliance serial number>
- X0: <appliance IP address>
- MGMT: <management IP address>
- MGMT MAC: <media access control address>
- IPMI: <IP address for IPMI>
|
|
CAUTION: All customers upgrading to SPP 7.0 require a new license. For more information, contact Support. |
As a SPP user, if you get an "appliance is unlicensed" notification, contact your Appliance Administrator.
Hardware appliance
The One Identity Safeguard for Privileged Passwords 4000 Appliance, 3000 Appliance and 2000 Appliance ship with the Privileged Passwords module which requires a valid license to enable functionality.
You must install a valid license. Once the module is installed, SPP shows a license state of Licensed and is operational. If the module license is not installed, you have limited functionality. That is, even though you will be able to configure access requests, if a Privileged Passwords module license is not installed, you will not be able to request a password release.
Virtual appliance Microsoft Windows licensing
You must license the virtual appliance with a Microsoft Windows license. We recommend using either the MAK or KMS method. Specific questions about licensing should be directed to your Sales Representative. The virtual appliance will not function unless the operating system is properly licensed.
Licensing setup and update
To enter licensing information when you first log in
The first time you log in as the Appliance Administrator, you are prompted to add a license. The Success dialog displays when the license is added.
On the virtual appliance, the license is added as part of Initial Setup. For more information, see Setting up the virtual appliance.
IMPORTANT: After successfully adding a license, the Software Transaction Agreement will be displayed and must be read and accepted in order to use SPP.
To configure reminders for license expiration
To avoid disruptions in the use of SPP, the Appliance Administrator must configure the SMTP server, and define email templates for the License Expired and the License Expiring Soon event types. This ensures you will be notified of an approaching expiration date. For more information, see Enabling email notifications.
Users are instructed to contact their Appliance Administrator if they get an "appliance is unlicensed" notification.
As an Appliance Administrator, if you receive a "license expiring" notification, apply a new license.
To update the licensing file
Safeguard licenses can be updated both on hardware and virtual machines, whereas OS licenses can be updated only on virtual machines.
To perform licensing activities
Navigate to Appliance Management > Appliance > Licensing.
-
To upload a new license file, click Upload new license file and browse to select the current license file. The Software Transaction Agreement will also be displayed during this process and must be read and accepted in order to complete the licensing process.
-
To remove the license file, select the license and click Remove selected license.
-
To get more information on the license and to export license data, click the What do these numbers mean? button, or click on the numbers in the tile.
If you want to export data about users, desktops or systems in CSV or JSON format, navigate to the table from which you want to export data by clicking the corresponding tab, for example Users Used.
Click the export icon located on the table. For more information on exporting, see Exporting data.
Below is the list of the available tabs.
For device-based licenses:
-
General
-
Desktops Used
-
Other Desktops
-
Systems Used
-
Other Systems
-
History
For user-based licenses:
-
General
-
Users Used
-
Password Vault Only
-
Other Users
-
History
-
The General tab, contains general information about the license:
|
CAUTION: For customers upgrading to 7.0 from a previous SPP release, be aware the following changes are required prior to upgrading:
|
The One Identity Safeguard for Privileged Passwords 4000 Appliance, 3000 Appliance and 2000 Appliance are built specifically for use only with the SPP privileged management software, which is pre-installed and ready for immediate use on the hardened appliances.
SPP virtual appliances and cloud applications are also available.
To set up a new deployment: One Identity Safeguard for Privileged Passwords 4000 Appliance, 3000 Appliance and 2000 Appliance Virtual Machine, or Cloud
If this is a new physical appliance, virtual machine, or cloud deployment, see the One Identity Safeguard for Privileged Passwords Appliance Setup Guide. The guide is also included in the package with a physical appliance.
To update an existing physical appliance or virtual appliance with this patch
It is the responsibility of the Appliance Administrator to upgrade One Identity Safeguard for Privileged Passwords by installing an update file (patch). Consider the following:
- Minimum patch version: 7.0.0.18401. If you are running an earlier version of the SPP Appliance, you must upgrade to this version before applying the 7.4 patch.
- Clustered environment: See the Patching cluster members section in the One Identity Safeguard for Privileged Passwords Administration Guide for instructions on how to deploy a patch so all appliances in the cluster are on the same version.
Prepare to install a patch
- Backup your appliance before you install a patch. Once you install a patch, you cannot uninstall it. See the One Identity Safeguard for Privileged Passwords Administration Guide, Backup and restore topic.
-
Download the latest physical appliance patch or virtual appliance patch from the One Identity Support Portal:
https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/download-new-releases
To install the hardware patch
- As an Appliance Administrator, log in to the SPP client.
-
Select Appliance Management > Appliance > Patch Updates.
The current appliance and client versions are displayed.
-
Click Upload a File and browse to select the update file you downloaded from the One Identity support web site.
NOTE: When you select a file, SPP uploads it to the server, but does not install it.
- Once the file has successfully uploaded, click Install Now.
To install the virtual machine patch
- Make adequate resources available. The virtual appliances default deploy does not provide adequate resources. The minimum resources required are: 4 CPUs, 10GB RAM, and a 500GB disk. Without adequate disk space, the patch will fail and you will need to expand disk space then re-upload the patch.
- Go to the web management console and click Setup and follow the wizard.
You can verify that the correct version has been successfully installed from the SPP desktop client or the LCD on the One Identity Safeguard for Privileged Passwords Appliance.
To verify the uploaded patch was installed
- Log in to the SPP client as an Operations Administrator or an Appliance Administrator.
- Select Appliance Management > Appliance > Appliance Information.
- Verify the correct appliance version is displayed in the appliance properties pane.
In addition, when the appliance is running, the LCD home screen on the front panel of the appliance displays SPP <version number>. Therefore, you can verify the correct appliance version is running from there, as well.