How to Authorize VM Compatible Backups? (4372651)

The Safeguard for Privileged Passwords web client allows to generate a backup on a hardware appliance which can then be uploaded and restored on a Safeguard virtual machine.

Due to the potential security risk with migrating from a hardware appliance to a virtual machine, the Appliance Administrator making the request is required to contact One Identity Support as part of this process before they will be able to complete enabling this feature. This approval is indicated by the Not Authorized/Authorized indicator at the top of the Authorize VM Compatible Backups page.

To authorize generating a hardware appliance backup for use on a virtual machine

1. Navigate to Backup and Retention | Authorize VM Compatible Backups.

2. In the Challenge Request User Identifier field, enter the name of the user requesting permission for the backup to be generated.

3. Click Generate Request.

   NOTE: Only one challenge request can be active at a time. If there is a pending challenge request already active, the active request can be cancelled by selecting the Invalidate Existing Challenge Request check box before generating a new request.

4. A Challenge Request text box will appear. This text box contains the information needed by One Identity to confirm the VM compatible backup authorization request is valid. Use one of the following options to copy the information:

   • Copy Request: This copies the challenge request to clipboard.

   • Download Request: This downloads the challenge request to a text file.

5. Contact One Identity Support regarding the request to authorize the download of VM compatible backups from a hardware appliance. When requested, send the copied or downloaded challenge request to One Identity Support.

6. Once One Identity Support has confirmed the request, a challenge response will be sent back. This text needs to be copy/pasted or uploaded (using the Browse button) to the Challenge Response text box.

7. Click Verify Response to confirm the request has been approved.

   Once confirmed, an Authorized indicator will be displayed at the top of the Authorize VM Compatible Backups page. The Download VM Compatible option will now be available through the  button on the Backup and Restore page on hardware appliances. In order to download a VM compatible backup it must have been created with password or GPG public key protection settings.

   The Remove Authorization button can be used to disable this feature. To re-enable, a new Challenge Request must be sent to One Identity Support.