Appliance specifications
The Safeguard for Privileged Passwords Appliance is built specifically for use only with the Safeguard for Privileged Passwords privileged management software that is already installed and ready for immediate use. It comes hardened to ensure the system is secure at the hardware, operating system, and software levels.
The following two tables list the Safeguard for Privileged Passwords 3000 Appliance and 2000 Appliance specifications and power requirements.
Table 8: 3000 Appliance: Feature specifications
| Processor |
Intel Xeon E3-1275v6 3.8 GHz |
| # of Processors |
1 |
| # of Cores per Processor |
4 cores (8 threads) |
| L2/L3 Cache |
8MB L3 Cache |
| Chipset |
Intel C236 Chipset |
| DIMMs |
Unbuffered ECC UDIMM DDR4 2400MHz |
| RAM |
32 GB |
| Internal HD Controller |
LSI MegaRAID SAS 9361-4i Single |
| Disk Hard Drive |
4 x Seagate 7E2000 2TB SAS 512E |
| Availability |
TPM 2.0, EEC Memory, Redundant PSU |
| I/O Slots |
x16 PCIe 3.0, x8 PCIe 3.0 |
| RAID |
RAID10 |
| NIC/LOM |
4 port - dual GbE LAN with Intel i210-AT |
| Power Supplies |
Redundant, 700W, Auto Ranging (100v~240V), ACPI compatible |
| Fans |
1 Supermicro SNK-P0046P and 2 Micron 16GB 2666MHz 2R ECC Unb Z01B Dual Label |
| Chassis |
1U Rack |
|
Dimensions
(HxWxD) |
43 x 437.0 x 597.0 (mm)
1.7 x 17.2 x 23.5 (in) |
| Weight |
Max: 37 lbs (16.78 Kg) |
Table 9: 2000 Appliance: Feature specifications
| Processor |
Intel Xeon E3-1275v5 3.60 GHz |
| # of Processors |
1 |
| # of Cores per Processor |
4 |
| L2/L3 Cache |
4 x 256KB L2, 8MB L3 SmartCache |
| Chipset |
Intel C236 Chipset |
| DIMMs |
DDR4-2400 ECC Unbuffered DIMMs |
| RAM |
32GB |
| Internal HD Controller |
LSI MegaRAID SAS 9391-4i 12Gbps SAS3 |
| Disk |
4 x Seagate EC2.5 1TB SAS 512e |
| Availability |
TPM 2.0, EEC Memory, Redundant PSU |
| I/O Slots |
x16 PCIe 3.0, x8 PCIe 3.0 |
| RAID |
RAID10 |
| NIC/LOM |
3 x Intel i210-AT GbE |
| Power Supplies |
Redundant, 700W, Auto Ranging (100v~240V), ACPI compatible |
| Fans |
4 x 40mm Counter-rotating, Non-hot-swappable |
| Chassis |
1U Rack |
|
Dimensions
(HxWxD) |
43 x 437.0 x 597.0 (mm)
1.7 x 17.2 x 23.5 (in) |
| Weight |
Max: 46 lbs (20.9 Kg) |
| Miscellaneous |
FIPS Compliant Chassis |
Table 10: 3000 Appliance and 2000 Appliance: Power requirements
| Input Voltage |
100-240 Vac |
| Frequency |
50-60Hz |
| Power Consumption (Watts) |
170.9 |
| BTU |
583 |
Safeguard for Privileged Passwords is also available as a virtual appliance and from the cloud. For details see:
- Using the virtual appliance and web management console
- Using the cloud
The front panel of the Safeguard for Privileged Passwords 3000 Appliance and 2000 Appliance contain the following controls for powering on, powering off, and scrolling through the LCD display.
-
Green check mark button: Use the Green check mark button to start the appliance. Press the Green check mark button for NO more than one second to power on the appliance.
|
|
Caution: Once the Safeguard for Privileged Passwords Appliance is booted, DO NOT press and hold the Green check mark button. Holding this button for four or more seconds will cold reset the power of the appliance and may result in damage. |
-
Red X button: Use the Red X button to shut down the appliance. Press and hold the Red X button for four seconds until the LCD displays POWER OFF.
|
|
Caution: Once the Safeguard for Privileged Passwords Appliance is booted, DO NOT press and hold the Red X button for more than 13 seconds. This will hard power off the appliance and may result in damage. |
- Down, up, left, and right arrow buttons: When the appliance is running, the LCD home screen displays: Safeguard for Privileged Passwords <version number>. Use the arrow buttons to scroll through the following details:
- Serial: <appliance serial number>
- X0: <appliance IP address>
- MGMT: <management IP address>
- MGMT MAC: <media access control address>
- IPMI: <IP address for IPMI>
Table 11: Appliance LCD and controls
|
Green check mark button |
Use the Green check mark button to start the appliance. Press the Green check mark button for NO MORE THAN one second to power on the appliance.
|
|
Caution: Once the Safeguard for Privileged Passwords Appliance is booted, DO NOT press and hold the Green check mark button. Holding this button for four or more seconds will cold reset the power of the appliance and may result in damage. | |
|
Red X button |
Use the Red X button to shut down the appliance. Press and hold the Red X button for four seconds until the LCD displays POWER OFF.
|
|
Caution: Once the Safeguard for Privileged Passwords Appliance is booted, DO NOT press and hold the Red X button for more than 13 seconds. This will hard power off the appliance and may result in damage. | |
| Down, up, left, and right arrow buttons |
When the appliance is running, the LCD home screen displays:
- Safeguard for Privileged Passwords <version number>
Use the arrow buttons to scroll through the following details:
- Serial: <appliance serial number>
- X0: <appliance IP address>
- MGMT: <management IP address>
- MGMT MAC: <media access control address>
- IPMI: <IP address for IPMI>
|
The Safeguard for Privileged Passwords 3000 Appliance and 2000 Appliance ship with the following modules, each requiring a valid license to enable functionality:
- Safeguard for Privileged Passwords
- One Identity Safeguard for Privileged Sessions
To add a Safeguard for Privileged Passwords module license
The first time you log in to the Safeguard for Privileged Passwords desktop client as the Appliance Administrator, it prompts you to add a license. In addition, you can add additional Safeguard for Privileged Passwords module licenses.
- Navigate to Administrative Tools | Settings | Appliance | Licensing in the desktop client.
- Click
.
-
Browse to select the license file.
Once you add a license, Safeguard for Privileged Passwords displays the current license information and additional links that allow you to update the license.
- To add another module license, click Add Another License from the Success dialog.
Note: To avoid disruptions in the use of Safeguard for Privileged Passwords, the Appliance Administrator must configure the SMTP server, and define email templates for the License Expired and the License Expiring Soon event types. This ensures you will be notified of an approaching expiration date.
The Safeguard for Privileged Passwords Appliance is built specifically for use only with the Safeguard for Privileged Passwords software that is already installed and ready for immediate use.
To setup a new Safeguard for Privileged Passwords 3000 Appliance or 2000 Appliance
If this is a new appliance, see the Safeguard for Privileged Passwords Appliance Setup Guide that was included in the package with your appliance. You can also find this guide on the One Identity Support Portal: https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/technical-documents
To update an existing Safeguard for Privileged Passwords 3000 Appliance or 2000 Appliance with this patch
It is the responsibility of the Appliance Administrator to upgrade Safeguard for Privileged Passwords by installing an update file (patch). Consider the following:
- Minimum patch version: 2.10.0.10980. If you are running an earlier version of the Safeguard for Privileged Passwords Appliance, you must upgrade to this version before applying the 6.0 LTS patch.
- Clustered environment: Please see the Patching cluster members section in the Safeguard for Privileged Passwords Administration Guide for instructions on how to deploy a patch so all appliances in the cluster are on the same version.
IMPORTANT: Always back up your appliance before you install an update file. Once you install an update file, you cannot uninstall it. For more information, see the Safeguard for Privileged Passwords Administration Guide.
Download the latest update from the One Identity Support Portal:
https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/download-new-releases
To install the software patch
- As an Appliance Administrator, log in to the Safeguard for Privileged Passwords desktop client.
- From the Home page, select
Administrative Tools.
-
Select Settings | Appliance | Updates.
The current appliance and client versions are displayed.
-
Click Upload a File and browse to select the update file you downloaded from the One Identity support web site.
NOTE: When you select a file, Safeguard for Privileged Passwords uploads it to the server, but does not install it.
- Once the file has successfully uploaded, click Install Now.
To install the Safeguard for Privileged Passwords desktop client
To define and enforce security policy for your enterprise, install the Windows desktop client application, which gives you access to the Administrative Tools. You install the Windows desktop client by means of an MSI package that can be downloaded from the appliance web client portal. You do not need administrator privileges to install the Safeguard for Privileged Passwords desktop client.
NOTE: PuTTY is used to launch the SSH client for SSH session requests and is included in the install. The desktop client looks for any user-installed PuTTY in the following locations:
- Any reference to putty in the PATH environment variable
- c:/Program Files/Putty
- c:/Program Files(x86)/Putty
- c:/Putty
If PuTTY is not found, the desktop client uses the version of PuTTY that it installed at:
<user-home-dir>/AppData/Local/Safeguard/putty.
If the user later installs PuTTY in any of the locations above, the desktop client uses that version which ensures the user has the latest version of PuTTY.
Installing the Safeguard for Privileged Passwords desktop client application
-
To download the Safeguard for Privileged Passwords desktop client Windows installer .msi file, open a browser and navigate to:
https://<Appliance IP>/Safeguard.msi
Save the Safeguard.msi file in a location of your choice.
- Run the MSI package.
- Select Next in the Welcome dialog.
- Accept the End-User License Agreement and select Next.
- Select Install to begin the installation.
- Select Finish to exit the desktop client setup wizard.
Installing the Desktop Player
|
|
CAUTION: If the Desktop Player is not installed and a user tries to play back a session from the Activity Center, a message like the following will display: No Desktop Player. The Safeguard Desktop Player is not installed. Would you like to install it now? The user will need to click Yes to go to the download page to install the player following step 2 below. |
- Once the Safeguard for Privileged Passwords installation is complete, go to the Windows Start menu, Safeguard folder, and click Download Safeguard Player to be taken to the One Identity Safeguard for Privileged Sessions - Download Software web page.
-
Follow the Install Safeguard Desktop Player section of the player user guide found here:
- Go to One Identity Safeguard for Privileged Sessions - Technical Documentation.
- Scroll to User Guide and click One Identity Safeguard for Privileged Sessions [version] Safeguard Desktop Player User Guide.
-
For Safeguard Desktop player version 1.8.6 and later, ensure your signed web certificate has a Subject Alternative Name (SAN) that includes each IP address of each of your cluster members. If the settings are not correct, the Safeguard Desktop Player will generate a certificate warning like the following when replaying sessions: Unable to verify SSL certificate. To resolve this issue, import the appropriate certificates including the root CA.
New Desktop Player versions
When you have installed a version of the Safeguard Desktop Player application, you will need to uninstall the previous version to upgrade to a newer player version.
