What's new for One Identity Safeguard for Privileged Passwords

New Release One Identity Safeguard for Privileged Passwords 7.0 LTS   One Identity is excited to announce a new long term support version of...

One Identity Safeguard for Privileged Passwords provides a single architecture for privileged access management that is delivered on a secure...

One Identity Safeguard for Privileged Passwords provides a single architecture for privileged access management that is delivered on a secure...

One Identity Safeguard for Privileged Passwords provides a single architecture for privileged access management that is delivered on a secure...

One Identity Safeguard for Privileged Passwords provides a single architecture for privileged access management that is delivered on a secure...

One Identity Safeguard for Privileged Passwords Virtual Appliance required Operating System Patch Pre-requisite for SPP 7.0 LTS Please refer to...

One Identity Safeguard for Privileged Passwords Physical Appliance required Operating System Patch Pre-requisite for SPP 7.0 LTS Please refer to...

Provides information about the One Identity Safeguard for Privileged Passwords release.

Provides instructions for configuring and setting up One Identity Safeguard for Privileged Passwords, including both the Privileged Passwords and...

Provides non-administrative users with instructions for requesting, approving, and reviewing access requests using the One Identity Safeguard for...

User Guide for the Safeguard Secrets Vault add-on which converts the open source Secrets Broker product into a Secrets Broker Vault.

Describes the components included in the package and main features of the Safeguard 3000 and 2000 appliances. It also provides instructions for...

One Identity Safeguard provides a single architecture for privileged access management that is delivered on a secure hardened appliance. This...

One Identity Safeguard provides a single architecture for privileged access management that is delivered on a secure hardened appliance. This...

One Identity Safeguard provides a single architecture for privileged access management that is delivered on a secure hardened appliance. This...

One Identity Safeguard provides a single architecture for privileged access management that is delivered on a secure hardened appliance. This...

How to configure MS Azure AD Federation for Safeguard Is it possible to logon with Azure AD users to Safeguard?

Enhancement Request to allow text formatting on the Message of the day and Login Banner

What are the required steps to upgrade or patch to the latest version of Safeguard for Privileged Sessions or Safeguard for Privileged Passwords?

Currently when "Review Required" is set on a Access Request Policy, a user cannot request the session/password if there is an outstanding review...

RDP and SSH connections initiated from Safeguard are failing after upgrading SPS (Safeguard for Privileged Sessions) from 6.1 to 6.2 while joined...

When attempting to upload a backup to one of the Replicas, receive the error, "Error – Request to https://applianceaddress/service/appliance/v3...

Can we tag a group of accounts (or create dynamic groups) based on the Partition Profile the account is assigned to? 

Customers want to configure Safeguard to use MS AD Federation Service for Federated Authentication

What versions of Safeguard for Privileged Passwords (SPP) and Safeguard for Privileged Sessions (SPS) are compatible? Can Long Term Support (LTS...

Common errors codes

When a password is requested through the desktop client, the letters and numbers are differentiated by different colours. However, the web...

When using the web client, timeouts are experienced - the message "Session Expired" may be seen. Followed by "Session Expired - Your...

When selecting an account and trying to check/ change password, or attempting discovery Safeguard returns the error "The service account credential...

Check Connection fails when configuring Microsoft SQL server platform. Connecting with asset SQLSERVER(sa) (IP-Address). Connecting to asset...

When Checking the connection on a Windows Asset in Safeguard, a GetComputerName function is run against the Windows Asset to verify its NetBIOS...

Each of the pre-built history queries (last 24, 7 days, 30 days, 90 days) when clicking on different date ranges, returns only the last 24 hours.

When trying to apply a Change Password task on an account, the task window does show that a password change did complete successfully, however, the...

Supported SSH algorithms changed in SPP 6.12.1 What SSH key exchange, ciphers and message authentication codes are supported by SPP 6.12 when...

What is the precedence of Host Key Algorithms when multiple host keys exist on target SSH systems? The order of preference for Host Key...

When trying to enable the check boxes for the following options in the Change Password Profile, the checkboxes remain unchecked : Update IIS...

Change Password fails on Checkpoint GAiA R80.10 and above. The error "Unable to change password for account due to an error." is shown when...

Requesting enhancement to change Asset properties, particularly for Active Directory assets, even when Safeguard cannot connect to the asset...

After clicking on the blue Unjoin Starling link within Safeguard getting error:  The directory or authentication provider cannot be deleted...

Requesting a password as emergency access using the WebUI while the password was checked out by other user fails with "Password is already checked...

When creating a Directory Group in Safeguard, it is not possible to edit the distinguished name after the fact. 

When performing a Check Connection on a SSH based Asset, the following error appears: Cannot connect to host because the asset SSH host key has...

Is it possible to have multiple service accounts for a single directory or to set up two directories that are within the same forest but use a...

Can the VM Safeguard image be cloned? When attempting to add a replica in the cluster the error is shown: "Replica enrollment failed...

Can the installation directory of thick client be changed or location of user.config be changed?

Can the hostname connection string by used in SecureCRT to connect to target systems?

Can the BMC ( Baseboard Management Controller) / IPMI (Intelligent Platform Management Interface) firmware be updated?

When displaying a password, the password is displayed for 20 seconds. Can this time be adjusted?

Can the 2.8 VMWare VM be upgraded to 2.9?

Is it possible to integrate TACACS+ (Terminal Access Controller Access Controller System) assets and accounts into Safeguard?

Can Safeguard for Privileged Passwords manage VMWare vSphere ESXi v7? 

Can Safeguard store files such as certificate private keys? Can Safeguard be used as a secret key store?

Does Safeguard respond to SNMP Get requests or SNMP Status (Walk) requests.? Is it possible to have Safeguard respond to SNMP polling? 

Can Safeguard 2000 & 3000 be mixed in the same cluster?

Safeguard for Privileged Passwords has the ability to check and change passwords for local and directory accounts, is it able to perform other...

When using Syslog in CEF format, Safeguard sends cs7Label and above, and cn4 and above. These customer string & numbers are not valid in SIEM...

Currently the Request approval on the Starling Approval Anywhere expires after 10 minutes, is it possible to increase this duration?

When using RADIUS authentication does Safeguard send the NAS-IP-Address or NAS-Identifier attribute in the Access-Request packets?

When retrieving a password from SPP Web UI, it is noted that in Chrome and IE that the 'Copy' button is active without the requirement of viewing...

When using Directory Asset Scan the "Network Address" of an asset is empty and just shows a set of hyphen symbols "-----------".

When using embedded sessions what is the retention period of the session files?  Does Safeguard ever delete the recordings? Are the PSM session...

When attempting to manage a Linux Asset with automated key management, the SSH key fails to be deployed to the target system.

When using a Microsoft Active Directory Asset is LDAP or LDAPS used for Domain Controller and Global Catalog communication?

When using account discovery is the password of the account changed on import?

The network info listed in Safeguard GUI does not include the MAC address for the X0 and XI NICs. Where can this be obtained?

When using the SPP web client and downloading a RDP file, when attempting to connect a "Please provide your server-side credentials:" pop up is...

This KB article applies to Hyper-V and VMware platforms only (not hardware appliances or cloud VMs). External Federation log ons will fail with...

Localization for web client

When importing objects, such assets Safeguard expects the import file to be a Comma Separated Values (CSV) file with the required fields. Name...

The Administrator Guide is unclear on what functionality is available when a cluster member is in read-only mode.

Linked accounts are removed from Directory Users after the Directory Sync runs. The Audit logs show that the "Automated System" is removing the...

AD login has been configured via Identity and Authentication. Upon configuring the AD group in Safeguard, and selecting "Automatically link...

When attempting to activate Syslog in IPMI on a 3500 appliance the following error is reported. “License is not activated yet. Activate your...

Safeguard is unable to communicate with certain AD Domain Controllers, due to timeout or unreachable errors.

Erorr messages found in the Activity Center: Access to the resource was denied Information RPC ports are blocked or IP address is not reachable...

After upgrading to 6.7, the Launch button is no longer shown when making a session request.  The red highlighted Launch button is missing.

It is possible to force a manual password reset on a One Identity Safeguard managed account through the API or PowerShell commands?

When user attempts to launch an SSH connection from Safeguard for Privileged Passwords Web UI on a MAC OS client, using the "play" button, they...

When failing over from the Primary to a Replica, is there any downtime or production outage associated with this?

There doesn't seem to be a way to configure scheduled activity reports so that they can be sent to emails other than the email of the logged-in...

Is there a way to extract the password of accounts in a report format?

When Safeguard sends Sysog events the "Device Event Class ID" header is missing The CEF format is: CEF: Version | Device Vendor | Device...

When using Syslog with CEF formatting, Safeguard sends custom string labels in lowercase. For example, cs1label is sent instead of the correct...

When performing a RDP login does SPP/SPS use the UPN username or domainname\username format?

When opening the Users tab of a Directory "User Groups" a "Loading" window is shown

When making a request from the browser the Domain field is blank. Issue occurs in IE, Firefox, and Chrome.

When importing Accounts or Assets vis CSV tags are ignored, and not created on the account/asset

When users connect to a managed server using Safeguard , the RDP client will show the Safeguard SPS IP (or X1 address) instead of the real...

When connecting to a RDP Remote Desktop Session from the Desktop Client or Web Client, an error message is produced "Because of a protocol error...

Error "Replica Enrollment Failed" popup when trying to enroll a new cluster member with the error: "Error:  Failed to level 2, [TincConfig...

Log into the Safeguard Desktop client, navigate to the User Groups menu, click on the "plus" button at the top and then select "Add Directory Group...

When assets are discovered by Asset Discovery on Active Directory is it possible to manually update/correct an assets "Network Address"?

When applying an upgrade patch to a Safeguard, the patch may take longer if there are many (eg counts of tens of thousands or higher) of queued email.

When adding DNS servers to X1 not all entries are saved. How many DNS servers can be assigned on the X1 interface?

If a cluster member is moved between sites or has an extended downtime due to construction or something else, what are best practices?

What versions of SNMP does Safeguard support?

In the SQL Server database agent grant permissions script there are two values to the populated @LoginName and @GrantSSISPermissions Select...

What types of ServiceNow (SNOW) tickets does Safeguard support?

What type of encryption does Safeguard use to protect communication with Windows assets?

What type of email alerts or notifications based on activities or tasks are available in Safeguard for Privileged Passwords?

When using SSH Key authentication what permissions need to be delegated via sudo to deploy a SSH key?

What sudo permissions are required on Linux/Unix assets in Safeguard?

A Safeguard device has entered quarantine mode. What steps to take when a Safeguard unit has entered Quarantine mode?

What SSH key exchange, ciphers and message authentication codes are supported by Safeguard when communicating to SSH systems?

When trying to create an Asset Discovery job, the error below appears: You cannot create an asset with a platform of directory device class...

While changing WinRM/Config/Service/AllowUnencrypted setting, error message " There are no more endpoints available from the endpoint mapper...

Is SPP affected by the exploit "Print Nightmare" CVE-2021-34527 Windows Print Spooler Remote Code Execution Vulnerability? More info: https...

A local account password reset can fail when you are using an asset that is configured with a service account with Administrative privileges other...

Will modifying the password rules in Safeguard affect or invalidate the existing passwords that have been generated for other Accounts?

Some monitoring environments rely purely on Dashboards and Reports for keeping track of performance. Even if email alerts are not required...

How to delegate permissions in Active Directory for a Safeguard service account

How to customize the putty's Windows title?

When attempting to configure Approval Anywhere for users in Safeguard, an error is received because the phone number was supplied in a non-standard...

After upgrading to 2.7, and trying to acknowledge a request (revoked, expired, check in) that was made in the previous version  the error "You are...

"A WebException with status TrustFailure was thrown" error appears as a task output when trying to add an AWS (Amazon Web Services) asset.

Error when adding a Service Now ticket system  {"Code":60414,"Message":"Failed to connect to ticket system 'dev' (https://fqdn.service-now.com...

Error when requesting an password or session "You cannot access this account while another request is pending password reset. (90010)" The...

Entitlements and Access Request Policies have been added however accounts are not showing when attempting to request

Keep the following considerations in mind when performing the enroll replica and unjoin replica operations to create a Safeguard cluster

Change the Password Interval (PASSINTV (userPassword-Interval) - (e.g, INTERVAL = 255 ) when changing a password to match the profile next change...

Support for other accounts other than AD accounts. Example: OpenLDAP

Seeking the ability to secure store documents within SPP, that can then be requested by users, similar to the password request workflow.

Password expiration warning is showing wrong amount of days.

ER-272778: For the ability to set a manual password when adding a new account. ER-272829: Allow Show Password to validate when setting a...

Column selections can be made to add/remove from the Open Requests. After logging out and back in, the column selections do not persist. Can there...

When an Approver navigates to the list of Request awaiting approval, certain details are show in columns on the left, however, to see the other...

Next password change date not updating to the value configured in password change schedule after performing a set password or change password...

Enhancement Request to enable customized logout URLs in web ui and desktop client

Sanity checks before manual change operation in Safeguard UI Confirming that the user wants to change the password with an option to enable...

Enhancement request to allow some control over the Platform Task prioritization

Enhancement Request to add the option to have assets/accounts/users disabled and not deleted during AD sync

Improve the Account view by adding the Dependent Services information to each account.

It currently is not possible to force a password reset for a new local Safeguard User on their initial login.

Currently, Safeguard does not include a header for Access Request Activity report extracts to authenticate the data source. The report data is not...

When selecting Change Password, to be able to enter a manual password. SPP currently have the option of setting the password manually, but it...

Measuring the speed and quality of service of the connection between two cluster nodes is difficult, and there are insufficient tools available to...

We are looking to have reports that we can run from Safeguard, without using the API, that will return a list of users, assets, accounts etc. These...

Customers would like to manage accounts that require smart card authentication. Upon approval of a password or session request on accounts that...

Currently, the way Safeguard works with external federation, is that each email domain (e.g. domain.com, child.domain.com, domain2.com) need to be...

Enabling FIDO2 authentication with Safeguard for Privileged Passwords This video describes the steps to enable FIDO2 authentication. The steps...

Enabling the TLS 1.2 Only option on Safeguard, the setting is only configured on the Primary appliance. Settings | Appliance | Appliance...

Steps to create asset-based tags from the Safeguard API.

This video will show the following steps to create an SSL certificate for One Identity Safeguard for Privileged Passwords appliance: - Create a...

How to create an MSI install log to troubleshoot installation failures with the SPP Desktop Client

When creating an Account Discovery rule for AD, it will match names such as "ABC" but will also import "ABCDEF". How can we configure it to only...

When creating an Account Discovery rule to find by (Property Constraint), Is it possible to enter a regex value to include both uppercase and...

Steps required to configure Safeguard A2A and credential requests.

Is it possible to configure Safeguard for manual password changes, and receive an alert or notification when a change is due?

Where can you review the password change and check settings for a Account in SPP?

What ports are required for communication between Safeguard cluster members?

When configuring Starling 2FA with on premise applications what ports or URL's need to be available to ensure operation?

What is the difference between the .ZAT session files and the exported .WEBM file?

Does One Identity have a data retention policy for it's Starling cloud based products.

What information is included in a Safeguard backup?

What happens to an RDP or SSH session when the session expires?

On account discovery rules there is an option to set a default password when an account is discovered, what does this do? When adding accounts...

What does the option "PreAuthenticate for Challenge/Response" do in secondary Radius authentication?

In regards to the Appliance Sick event, this can various issues, there are 6 categories for appliance sick events which can be distinguished by the...

What do the NIC LED colors indicate on Safeguard?

When reviewing the Activity Center in SPP, there are events that are being performed by the PAM Connector. Can you confirm the source of these tasks?

What are the steps to perform a factory reset from the recovery kiosk or MGMT network interface on physical devices?

How large are the session recording files for SSH and RDP?  What are the estimated sizes of sessions recordings captured?

What are the hardware specifications of the SG2000 Appliance?

What are the firewall rules on Safeguard?  Is it possible to ping the Safeguard appliance?  How is the firewall configured on Safeguard...

How are Managed Networks defined in Safeguard for Privileged Passwords

What Archive Servers are supported by TPAM? What operating systems for the archive servers are supported? What protocols are supported for archive...

While using the SPP web-UI, if presented an error (Our testing has specifically identified the errors from the "Request Error" page), users may be...

web client is stuck and unable to complete loading when using Internet Explorer

Video: Safeguard Asset Discovery example using both Directory and Network Scan

When changing permissions (for example: removing permissions, applying the changes, adding permissions back then applying new changes) in a "Local...

Users experience degraded slow performance of password change and checkout. When making a Request the Asset Selection screen is extremely slow, it...

Error when using the "Test Rule" for local users. Desktop client error: "Unexpected character encountered while parsing value: %. Path ", line1...

When creating a User Groups, it is found that not all users have been imported into the User Group. The User Group has "Require Secondary...

When an LDAP account is used in an SSH Access Request Policy (either Linked Account or Directory Account), it is formatted in the connection...

Upgrading stalls at x % unable to complete.

Safeguard provides customers with the ability to update dependent systems that run as a domain user account on a Windows asset. When Safeguard...

These issues have to do with the first object listed being treated as the “selected” object. Select another listed object , delete and both the...

Understanding the Mainframe platforms

When attempting to activate the BMC (Baseboard Management Controller) or reset the password of the default administrator account the following...

Is there a JSON schema available for activity and entitlement reports?

Is Safeguard for Privileged Passwords affected by the following vulnerabilities? CVE-2022-21849 CVE-2022-21907

Is it possible to use SMTP authentication in Safeguard?

It is possible to specify the X1 address as a FQDN name so the PSM session could be routed to a NAT'd IP using Split DNS?

Is it possible to generate and download a backup from a quarantined SPP appliance?

Is it possible to store a password in Safeguard, that is available for request, but remains static and does not need to be changed?

Is it possible to set a static networking route in Safeguard?

Is it possible to set a password/encryption key on the backups Safeguard creates?

Is it possible to send Syslog events securely to the Syslog server? For example using SSL/TLS?

Is it possible to send Syslog alerts over TCP instead of UDP?

Is it possible to restore a hardware backup onto a Safeguard virtual appliance?  Error: "The uploaded file could not be validated as a genuine...

Is it possible to restore a backup done at a different Safeguard version? For example, can a 2.11 backup be restored to a 6.10 Safeguard device...

In networks where access to Active Directory is not possible or allowed, is it possible to RDP into a AD member server using a Active Directory...

For audit and security reasons is it possible to prevent a user logging onto Safeguard multiple times concurrently?

It is possible to preview the results for asset and account discovery, is this also possible for services? Why is it only possible to ignore...

Does Safeguard have a web page that can be monitored by a load balancer (For example F5) for health states in case the appliance is unavailable or...

Is it possible to modify the Account Discovery Rules through the Safeguard API?

How can we manage the password for Password Manager's Self-Service-Portal service account with One Identity Safeguard?

Is it possible to load up multiple instances of the Safeguard thick client?

Is it possible to get the appliance shipped with a power supply that will accept Direct Current (DC) input?

Is it possible to get a list of potential Syslog events / alerts and the Syslog fields that are sent?

It would be useful to generate a report filtered for certain assets that contains a list of accounts and the date and time of their last successful...

Is it possible to extend the request time of an current opened request?

On 6.8, when using  Asset-Based Session Access. in Access Request Policy | Access Config. After adding an account into "Directory Account", and...

When attempting to import Assets via CSV the task shows as a Sucess however, the assets are not created in Safeguard

No assets are returned in Reports -> Entitlements -> by Asset - Browse

A critical vulnerability was recently discovered related to systems/software that run Apache Log4j More information about this vulnerability...

If the primary fails and replicas going into "ReplicaWithQuorum" state will password changes still occur?

If a Safeguard user has an expired password will they be able to change their password at login?

In an ARP (Access Request Policy) you can set up Approvers or Auto Approve the request, but you cannot set it up as which time of day should they...

One of the appliances in your SPP Cluster has failed, and an RMA replacement has been delivered. Follow the instructions below to setup the new...

Instructions for configuring Windows systems for privileged password management in Safeguard

There is a requirement to Authorize VM Compatible Backups on Physical Appliance.

The latest released version of Safeguard can be found on our support portal via the link below: https://support.oneidentity.com/one-identity...

How to verify the health of the Safeguard for Privileged Passwords Cluster?

How to use the buttons on the front panel ? How to shutdown/power up the appliance correctly ?

In the README.txt file of DB_Oracle_CLI_Upgrade.zip, instruction states: "The password encryption can manually be done by executing 'Dbwc_Common...

How can I create a Custom Platform in Safeguard for Privileged Passwords

What is the upgrade path that is required to move from the 2.x version of Safeguard for Privileged Passwords to the 6.x version?

Troubleshooting tips common issues related to Safeguard communicating with target Assets.

Is there a way to be notified of Starling outages automatically? 

Would it be possible to change the default behavior for the Desktop Client so that users are not redirected to an external web browser when they...

How is the SafeGuard appliance shut down or restarted when using the GUI?

How to setup Certificate authentication for Safeguard users

After configuring Safeguard for PSM, the following certificate message is requested when you open an RDP session via Safeguard. 'Certificate or...

How to unlock and reset the password for the Safeguard Bootstrap Admin account.

When performing the initial configuration of your SPP appliance, please ensure that the Lights Out Management (BMC) is configured. This will be...

Ports for platforms supported in One Identity Safeguard

Is it possible to run physical Safeguard for Privileged Password (SPP) hardware and Virtual Safeguard appliances in a Safeguard for Privileged...

A manual backup was performed prior to enrolling a Replica in the Cluster. The backup had completed, but was in the process of archiving in the...

What are the Azure Marketplace Recommended Plans and why were those chosen?

When trying to connect to a target server, the error message below appears: Authentication failed Your Remote Desktop Services sessions has...

Assets and asset groups applicability within password access request policies.

When an internal process such as delete sync is about to delete entities, there is no warning / opportunity to stop the deletion if so desired...

How to physically connect to the Safeguard Kiosk?

How to perform a RDP session to a Windows asset with a Linked Directory Domain account?

How to perform a RDP session to a Windows asset with a Directory Domain account?

In the event that your Starling Subscription in Safeguard becomes 'out of sync' with the Starling Cloud Servers, one side may believe that the Join...

Connecting to Amazon Web Services (AWS) from Safeguard returns the following error: Transport reported error: Failed to verify SSL cert with...

How to add or remove SSH algorithms for supported Public Key, Cipher, KEX and MAC in Safeguard.  When setting up an Asset for management using...

What is the process for migrating customer data from TPAM over to Safeguard?

How to manually vault SSH private keys

How to join and configure  Safeguard and Starling 2FA

How to install the Safeguard PowerShell module

How to install a software patch and upgrade Safeguard

What is the best way of monitoring the status of the Scheduled Check and Change Queues in Safeguard?

How to get support for the Virtual Trial of One Identity Safeguard located at  https://www.oneidentity.com/register/113750/

How to generate and install a SSL web certificate from a Safeguard created "Web Certificate Request" when using a Microsoft Certificate authority

How to generate a support bundle for One Identity Safeguard?

How to generate a report of all assets that do not have passwords stored (to help troubleshoot the root cause)

How to generate a Fiddler capture for the purpose of troubleshooting and diagnosing network communication issues.

How to export reports in user's local timezone ?

How to enable the Cloud Assistant feature for access request approvals in SPP?

How to enable diagnostic logging in the Safeguard thick client / desktop client

How to download the SNMP MIB file

When logging into the SPP client, the user receives a prompt that says, "Your password is about to expire. Your password will expire in X day(s...

Is it possible to export reports in any format other than JSON? Is it possible to export reports in HTML, PDF or CSV formats?

Procedure to expand \ increase disk for SPP virtual appliance.

Is it possible to downgrade or rollback a Safeguard appliance to a previously installed version? Is it possible to remove or uninstall a...

Is it possible to disable access to RESTful API? i.e. when user will try to open https://<Appliance IP>/service/core/swagger it will show nothing...

When downloading an .RDP file to connect to a PSM session, is it possible to configure the default settings such as screensize (specific resolution...

When exporting reports to CSV, is it possible to specify which columns are exported?

Is it possible to change the language the Safeguard Windows Client is in?

Is it possible to bypass the local proxy server on the thick Client?

When attempting to a add a Active Directory asset or Active Directory into Identity and Authentication Safeguard uses DNS SRV records to enumerate...

Is it possible to add custom logos or other branding to the Safeguard web pages?

Behavior is seen where users will submit a Request, and rather than checking the password back in, they will allow the Request to sit open until...

Is it possible to configure authenticated scans of the Safeguard appliances using a tool such as Nessus?

Is it possible for a administrator to disable email notifications for users such as the "Access Request Approved" email? Is it possible to...

Is Cisco Duo Push supported for use as an external authentication method in SPP?

When logging in using Active Directory credentials - User receives Invalid password message accessing the One Identity Safeguard desktop client...

After loading up the Safeguard Client or Web UI the Favorites take a long time to load. On 2.8 the error maybe shown: "Request to...

When testing connection to SQL asset, Failed to validate the SSL certificate. System connection test failed.

When using the "Windows Server" or "Windows Desktop" platforms password checks of Windows managed asset are generating failed logins for the user...

When trying to activate the Azure function "Azure Passwordless Phone SignIn" for the users (while using external Federation to Azure for Safeguard...

Started to receive event 10036 in windows server system logs as below. The server-side authentication level policy does not allow the user...

When playing a recorded session through Safeguard, the Desktop Player shows the error:"Unable to verify SSL certificate. To resolve this issue...

In the Dashboard, Open Requests are showing up with the State "Pending Acknowledgement". When attempting to close these requests the below error is...

When trying to connect to a Session request, the error below appears in red font: You cannot access this account while another request is under...

Unable to add ESXi 6.7.2 or 6.7.3 asset. Error "vSphere management API version 6.7.2 is not supported" when testing connection. 

"Check Connection" and "Test System" fails on Windows asset with "Unable to log in to the asset using service account service_account." error...

Error: "Unable to log in to the asset using account user@yourdomain.com" when attempting to Change a password on a Active Directory directory...

Error: "Transport reported error: 1255: A network-related or instance-specific error occured while establishing a connection to SQL server. " when...

After updating to version 6.6 or 6.7 the switches for Account Discovery and Service Discovery will be reset to "Off" which will cause all discovery...

Error: "This computer can't connect to the remote computer. Try connecting again. If the problem continues, contact  the remote computer or your...

Error when attempting to set a schedule for Account Discovery "This action is no longer supported. See documentation for more information. (60612)"

When attempting to run a Directory Account Discovery the error "There are no assets associated with this account discovery schedule" is shown.

Error: "The update cannot be applied because one or more preconditions were not met: {"Errors":["The current appliance has XXGB of free disk space...

Error: ""The specified user's domain is not available for identity and authentication. Please review the settings for yourdomain,com under Settings...

Error: "The security policy of your computer requires you to type a password on the Windows Security dialog box. However, the remote computer you...

Error: "The Linked session module policy is invalid please try again later" when attempting to take out a Password access request

Error: "The effective role/policy, xxxx/yyyy, specifies fewer approvers than the number of approvers that it requires."

Error: "The certificate does not have a private key (error 60273)" when importing a SSL certificate

When connecting to a SSH session, Putty is not loaded and the error "SSH client cannot be found" or "SSH Client Program cannot be found" is shown...

When connecting to a SSH Putty session through the Safeguard web interface "Server sent disconnect message type 3 (key exchange failed...

After deploying the VMWare OVA the VM boots and stats on a blue screen"Safeguard is starting up. The is may take a few minutes..."

Error: "Request to https://x.x.x.x/service/core/v2/AuthenticationProviders?count=True failed with status code 404 (Not Found)." when using...

Error: "Please try again. The linked session module state is currently down or may be in a locked state. (90902)" when attempting to connect to a...

Receive "Object reference not set to instance of an object" error when attempting to edit an account discovery job.

Error: "No SSH host key found for asset 'AssetName' with id xx. (90603)" When attempting to take a session request against an asset with...

When creating a new SSH asset, there is no option to "Auto Accept SSH Host Key", and the host key is not automatically discovered.  Later...

Error: "No Desktop Player The Safeguard Desktop Player is not installed. Would you like to install now?" when attempting to playback audit trails...

When attempting to take a "User Supplied" session out through the webclient the error "No account available. Contact your administrator" is shown...

Linux/Unix assets that use SSH Keys fail with the error "Missing or invalid service account SSH key. (60158)" when performing check password or...

In Safeguard for Passwords 6.9, when modifying or viewing directory attributes, and an attribute is mapped more than once then the following error...

Error: {"error":"invalid_request","error_description":"Invalid provider id  Parameter name: scope","success":false} when attempting to login using...

When attempting to add a new SPP cluster member the error: "Invalid hostname entered. (60319)" is shown

Error: "Invalid connection file" when attempting a RDP launch an RDP connection

When attempting a session from SPP, auto login is not perform and the user is requested to enter a password. After manually entering the password...

Error: "Error: Failed to license Windows which is required to complete initial setup. Check both your license and network configuration. Error Code...

Error "Could not resolve an Active Directory forest for domain 'yourdomain.com'. (60420)" when attempting to add a "Microsoft Active Directory...

When trying to create a certificate signing request an error message is returned stating there is already a pending request "Could not create a...

When using a service account that is the root user or has a uid=0 user, the Test Connection Fails with error "There are no more methods for user...

When attempting to set a user up for Starling authentication the error "Communication with Starling Two-Factor Authentication failed. Reason: An...

When attempting to set a user up for Starling authentication the error "Communication with Starling Two-Factor Authentication failed. Reason...

Error: "Cannot write more bytes to the buffer than the configured : 2147483647." when attempting to download or archive a large (over 2GB) backup

When attempting to take a RDP session and using the SPP web client, SPS shows the error: "Authentication failed" . Using the thick client the...

Error: "Asset cannot be added to partition with ID x. Parent directory 'yourdomain.com' (x) is restricted to partition 'Macrocosm' (x). (60253...

Error: "Appliance is in Read-Only Mode (60361)" when attempting to set NTP server on replica. From the Safeguard client the option to...

Error when making a Session Access Request: "An unexpected ObjectDisposedException was thrown: Cannot access a disposed object. Object name...

Error when attempting to install an update "An update is staged on the primary but cannot be installed until it has been distributed to each...

When adding a Radius server into Identity and Authentication and click OK, the error is shown: "An error occurred while testing the configuration...

Error: "Alert - Invalid policies detected." is shown in popup in the Safeguard client. When viewing the Entitlements show show the warning...

When using Network Level Authentication (NLA) within Microsoft Windows in conjunction with Remote Desktop Connections, Microsoft Windows will deny...

When Account Discovery configured with the below options, an error occurs and account discovery fails: Discovery Type: Directory Find By: Name...

When attempting to log onto Safeguard web interface with Active Directory user the error is shown:  "A system error occurred and has been logged...

When Azure users login the error is shown:  "A system error occurred and has been logged. Please try again later or contact your administrator." or...

Despite certificate with CRL (Certificate Revocation List) points being added, when connecting to a RDP PSM session the error "A revocation check...

When attempting to upgrade Safeguard, the error 90104 or error  "The update cannot be applied: The digital signature is not valid. (100104)." or...

Error: "32 bit windows is not supported" error when attempting to install the Safeguard client. Does a 32 bit version exist?

"Check Connection", "Change Password" and "Check Password" on Active Directory with the error: Could not communicate with the specified...

In User Groups | Directory Group, getting error: ""The request is invalid. (70000) The field Name must be a string or array type with a maximum...

Is it possible to have Safeguard send a notification to a requestor that their Password or Session request is going to end in X minutes / hours...

Looking for a functionality that would send an email notification to an Account owner to notify them that a password change is scheduled in X...

Download Windows Client

Which domain name format does the gateway authentication requires when using the SPS initiated workflow?

Does the Safeguard client need to be running the same version as the Safeguard devices?

How to apply a diagnostic package to your Safeguard for Privileged Passwords appliance.

How to apply a Diagnostic Package via the MGMT port on your Safeguard for Privileged Passwords (SPP) appliance.

How to add additional attribute into Safeguard from Active Directory?

How to access the Swagger API ?

How many users can connect to Safeguard for Priv Password via web browser? How many users can connect via Safeguard Desktop Client?

How many Password Changes can Safeguard perform per day?

How Email Notification for partition owner works ?

If an SPS appliance goes down for any reason, SPP will continue to serve end-users sessions to that now unavailable SPS appliance. This affects...

How does SPP select which SPS node to use for a session? How does SPP calculate SPS fitness?

There are two different ways that management tasks can be executed on a One Identity Safeguard for Privileged Passwords appliance: manually, as...

How does Safeguard handle DNS resolution and can it resolve separate DNS domains?

Does the HP-UX platform support Trusted, Untrusted and Shadowed HP-UX systems?

Does SPP support VNC sessions? 

Is it possible to store and manage Team and/or Personal passwords with the ability to share those passwords within a team? 

Does Safeguard support SSH key management?

To what extent does SPP support Azure? Can it be deployed to Azure? Does it support managing Assets hosted in Azure? Does it support authentication...

Does Safeguard support sending the Strict-Transport-Security header?

Is there a way to scan the Linux sudoers file for privileged accounts, which can then be imported to Safeguard for management?

Does One Identity Safeguard for Privileged Passwords have a desktop client for MacOS?

Can IPv6 addresses be used for Assets in Safeguard?

Is it possible to view historical or prior passwords for an account?

Does restoring a backup restore the cluster and its members?

Do users have to use Starling Authentication when using Approval Anywhere?

Do the Safeguard 2000 Appliances have hot-swappable  Power Supplies?

Scheduled asset discovery jobs and identifying and importing Assets that have already been manually added to Safeguard, which is causing conflicts...

Directory syncs are set to occur every hour, and they were doing so until 2:55 AM EST today. After trying to force a sync on the asset through the...

Since upgrading to One Identity Safeguard for Privileged Passwords 2.10, new directory assets, accounts and users are no longer being imported...

Directory Provider Sync Failed with: ERROR: "a valid service account must be specified for this connection type"

Without any warning or notice, Safeguard will delete directory assets which were originally discovered using asset discovery. These assets and...

SPP is unable to complete the process of updating the service credentials and restarting the service on a Dependent Asset, because the process is...

Deleting the last (n=1) user in Safeguard doesn't decrement UsersUsed to 0; it leaves it at 1. And adding then deleting another user doesn't...

When joining SPS to SPP, Join fails due to a certificate error with the following output (note, this may only be in Debug log...

Sessions shown as active in the Activity Center and Dashboard where it's already logged off.

The Hyper-V Image of Safeguard for Priv. Passwords available on the One Identity Support site 6.0 LTS fails to start as expected once imported and...

SPP cannot establish a connection / connect to SPS after changing or removing the initial IP address that was set up when the user first enabled...

After integrating with an external sessions module (Safeguard for Privileged Sessions) the dashboard's session "termination" feature will not work...

Replica appliance was unjoined from Cluster. It is absent from Cluster Management on the Primary, but it still showing the Cluster with a status of...

After upgrading to 6.7, one of our appliances has been quarantined repeatedly. We take measures to recover it, and soon after it quarantines again.

Is Safeguard for Privileged Passwords 6.0 LTS safe to deploy with latest hypervisors? e.g., VMware ESXi 7.0

Significant slowness in Web UI access, Desktop UI access and API calls.

When trying to modify the archive server configuration on a replica appliance, the options are greyed out.

Unable to import certificate into Safeguard with error: "Certificate chain is not trusted. Reason: (OfflineRevocation) The revocation function was...

Unable to import accounts containing special characters. Example of Account name affected : Test@GakemySQL\instancename

The right click option is unavailable when attempting to generate a Certificate Signing Request on a Replica enrolled in the Cluster.

Attempting to modify a Password Profile assigned to a Password Sync Group, and unable to do this through the Desktop Client. Also attempted to...

Step by Step Instructions for Troubleshooting Connection Failures to Managed Assets in Safeguard

When navigating to the Audit Log Maintenance in the Desktop Client the following message is displayed: "This operation is deprecated. (60816)"

These settings can not be changed on a replica. (Go to the primary at <Primary IP Address> You may be prompted to log in.)

If an Access Request Policy is configured with approvers and there are users also configured in the list of "Notify if approvers have pending...

Attempting an upgrade from Safeguard for Privileged Passwords 2.11.x to Safeguard for Privileged Passwords 6.x and receive the message: "The...

The client shows Disconnected, when going into any asset a "Loading" screen is shown but the details never load:

When using Secondary Authentication with a Radius cloud provider such as Azure or OKTA, instead of showing a screen from Radius a generic "The...

While reviewing the Activity Centre, troubleshooting a session connection problem to a target system the following message is displayed in the...

Check Connection fails on Azure AD asset in SPP. Error: Queuing task. Starting task. Connecting to asset AzureAD failed with error: Starling...

The + symbol does not work when attempting to add an Group using the "Find By" Group option in a Account Discovery Rule.

The "TLS 1.2 Only" toggle switch/slider in Settings is greyed out and doesn't reflect the current TLS 1.2 status

After double clicking on a Directory account The "Enable Session Request" checkbox is missing.

If the users language preference in SPP is German and when downloading the RDP file, the text on the download button (RDP-Datei herunterladen) it...

Creating an Oracle Database Asset in Safeguard with a service account and managed accounts that are in lower case will cause the Test connection...

Testing connection or performing check password to an Oracle asset configured in Safeguard returns the following message: "ORA-12514: TNS...

The Syslog "User Authenticated" and "User Authentication Failed" events do not contain source IP, is it possible to add this?

After upgrading Safeguard for Passwords to 6.11, when viewing the Syslog configuration, it is noted that the subscribed events are removed or...

Supported platforms: Directories that can be searched

When trying to generate a Support Bundle a following error message occurs: "A Support Bundle is currently being generated by [username]. Please...

Go to Navigation Panel │ Storage & SAN │ Storage Capacity Click on either "Volumes" or "Aggregates" fields. No information is being displayed...

How is the operating system on a Safeguard appliance secured? Will patches be provided to address security vulnerabilities?

Chrome browser's cookie handling, specifically with SameSite attribute is being changed. A new setting is being introduced into Chrome version 76...

How to register your One Identity product license to enable self-service features on the Support Portal. 

What avenues are available for obtaining assistance with One Identity GitHub content 

Unable to save Discovery Job when editing because there is no available Directory in the drop down.

When Asset discovery Jobs are run manually the following error appears: An error occurred while trying to perform platform task...

Connections to AS400 systems may get stalled and not move past "Starting Task"

Large session files fail to archive, which causes the backup size to increase and also fail to archive. Errors such as "The 'UploadBackup' xxxx...

A new API-only feature has been added to allow administrators to manage per user settings throughout the lifecycle of their account. Examples...

If you receive an Anti Cross-Site Request Forgery token error when attempting to log into Safeguard for Privileged Passwords using Microsoft...

An asset that is part of an Access Request Policy does not show up in the New Access Request List for any user in the Entitlement.

An asset and an account can have different profiles with different change and check password settings configured.  The account profile has the...

Amazon Web Services (AWS) platform

In 2.11 and above, there is a new "Launch" button on the web interface, however when clicked this errors "Session launched. If your session didn't...

After configuring the BMC (Baseboard Management Controller) interface according to the instructions provided in the One Identity Safeguard...

While attempting a join between SPP and SPS the SPP cluster is found to have a cluster lock and cannot proceed.

Which virtualisation hypervisors can Safeguard for Privileged Passwords be installed on?

Which SSL/TLS ciphers are enabled on the HTTPS web interface? Can TLS 1.0 & TLS 1.1 be disabled?

Which browsers are supported by Safeguard?

In an Account Discovery job, if multiple rules exist and more than one rule can match the same account, which rule settings would apply to that...

Where to find the serial number for the appliance?

The values for custom OIDs are needed to build custom dashboards with the Wizard/drag and drop functionality.  Where are the custom OIDs and...

Where to download the virtual machine image for Safeguard for Privileged Passwords

Where are the Safeguard Management Shell modules and scripting resources located?

When using User linked accounts for Asset Accounts, accounts may incorrectly show as a possible password request. An error will be returned at...

Manual password reset notifications are sent on schedule, despite the password being reset before the scheduled time.

Require Safeguard to manage the passwords of its own local admin users? (Like the bootstrap admin or any other local user with admin privileges...

Changing password for account managed_acct. The platform responded with unexpected data: Enter New UNIX password: Password for account managed...

An AD directory account fails a "Password Check" with the below error: "Queuing task. Starting task. Verifying Password. The password for...

Successful dependent service restart reported as Dependent Asset Update Failed in logs or Task Completed with Failure

When attempting to manage accounts on SAP HANA, Safeguard is able to successfully connect to the target SAP HANA instance, check connection works...

In Safeguard 6.9, a Partition Owner user (with no other permissions) is able to create an asset, but cannot create an account on that asset...

This video provides a review of the various interfaces for Safeguard, both web and Windows client based.

A security vulnerability was discovered in one of the authentication components that may be used when logging in to Safeguard for Privileged...

This patch includes the changes listed in the following sections. One Identity may generate additional patches for future releases of the product...

This video covers Privileged Sessions - how to start a session, request a session (approval process), playback, and so on.

This video covers the monitoring and recording of privileged sessions.

This video covers the Password request request process - password management for privileged accounts, as well as Password checkout/check-in.

After a successful request and check-in, safeguard does not reset the account password. The account is showed as "Pending Password Reset" in the...

This article will detail how to review what licenses are installed and how to install new ones if necessary.

One of the cluster members is using a self-signed certificate, rather than the 3rd party certificate that was imported.

On the logon screen is it possible to define which Identity Provider is the default (Local, Active Directory, External Federation etc)

When performing a "Asset Discovery" the "Directory" scan option is grayed out.

When attempting to View Live Session from the Dashboard, or the Activity Center playback fails, the initial screen is displayed then an error is...

On the 6.8 thick client, when trying to add multiple Syslog Events in Settings | External Intergration | Syslog, only the first event is being...

On 6.10 webclient unable to click "Submit Request".  This occurs when the language is set to anything non-English, and there are time restrictions...

When "Change password after check-in" has been set on a RDP / SSH policy, the password is not changed after check-in. The dashboard shows the...

When using a "User Supplied" access request, and requesting the access from the web client at the point submitting the request, the "Submit Request...

When logging into One Identity SPP and it requests the One Time Password number, this error message is received: "Authentication failed for user...

When mapping an AD attribute to a Safeguard attribute via Directory Attributes tab, it is not possible to select various custom attributes.  It...

After upgrade from 2.x - 2.9 discovery jobs return "No appliance available to execute platform request. (60609)" message onscreen and in logs.

An issue was discovered in the expected availability of appliances when an upgrade is applied. Customer reports that no appliances were available...

The underscore character _ cannot be used in Network Address fields throughout SPP. For example, if the FQDN of a server is test_server01.test...

How to retrieve or refresh a license key using the One Identity Support Portal 

How to upgrade your One Identity license key 

How to merge multiple license files into a single license file

Modifying the IP address on X0 interface in a cluster Where possible, we would recommend the you familiarise yourselves with the process in a...

The HADR availability collection may cause an alert should an availability listener have more than one IP address.

After upgrading to 2.7 Directories no longer appears on the menu

After an upgrade to 2.8, it is noted that every 15 mins there are unexpected NTP warnings.

After upgrading Safeguard from 2.5 to a 2.6 or above, when playing replaying a session the error: "Desktop Player - The Safeguard Desktop Player...

When adding an Unix/Linux asset in 6.0 LTS, and selecting SSH Key authentication it was possible to select to use a global SSH key from the "SSH...

One Identity Safeguard is unable to manage Fortinet device configured with Virtual Domain.

An entry for the 1.3.6.1.4.1.318.1.1.26.4.3.1.5.1 OID was added to the "Custom Properties Configuration" list of the SNMPInferred agent to...

Safeguard's baseboard management controller (BMC) utilizes the IPMI 2.0 specification which supports RMCP + Autenticated Key-Exchanged Protocol...

Enhancement Request to integrate an option for the user to set the RDP session settings when automatically starting a session from the Client or...

Minimum Required Permissions for Windows Asset and Directory Password Management and Sessions

Microsoft Security Advisory ADV190023 published to introduce LDAP channel binding and LDAP signing support. 

Microsoft recently released an update for Windows to correct a defect in the verification of signatures utilizing elliptic curve cryptography.   

How to manage services where the Windows service account is a domain account.

RDP sessions are failing to connect through Safeguard with the error below: "An Internal Error Occurred" When checking the Events viewer...

Signature and Timestamp indicators in Safeguard Desktop Player show Red X

Starting with version 1.10.11 of the player, if a user attempts to playback a session from the activity center of the SPP user interface, the...

How are the Safeguard Hardware appliances protected against possible attacks? What security measures are employed?

Error "No reachable DomainController servers found for domain yourdomain.com. (60301)"

A Bloomberg article has been stating that Supermicro has been compromised. Supermicro refutes these claims.

Using the Approval Anywhere functionality with Starling Two Factor Authentication (2FA) app for mobile approvals of Safeguard password and session...

What is a Starling Hybrid Subscription and what products are eligible for for this subscription?

In SPP SqlServer and PostgreSQL assets can be configured to require SSL. In this case, users will be required to add the certificate to the...

Although the Active Directory agent is active and the prerequisites diagnostic tests are successful, the data collection is not happening. Below...

Safeguard provides customers with the ability to suspend and restore accounts for access. This means that the account on the asset is disabled...

When making a request on the 6.8 or 6.9 thick client, and there are multiple accounts on an asset, the description of the accounts are missing on...

Password archive check is available on Safeguard Windows Client and same functionality is needed for the Safeguard Web Portal.

A User has an approved session, but the expected 'Play' button is missing via the web UI. The icon does show as expected in the Desktop Client.

When testing an Asset via the 'Check Connection' button an error may be returned.  The Safeguard 'Task' window my show "The known ssh host key does...

When attempting to join Safeguard for Privileged Passwords to Starling for 2 Factor Authentication, the user selects "Join to Starling" but the...

When attempting to logon to Safeguard with a local user that has exceeded their "Maximum Password Age", the client and web interface report...

Safeguard SPP uses global 'commit' command in PAN OS to complete password changes. A Global Commit causes any uncommitted changes - regardless of...

Safeguard's audit log management panel displays an error when clicking the Test button to send the audit logs to the Archive server. "Test...

In PAN OS, Safeguard open a Commit Lock prior to performing a password change. The lock is released after successfully changing the password...

The Asset Administrator can now join a Safeguard Sessions Appliance with a standalone primary  Safeguard for Privileged Passwords  Appliance. Once...

Safeguard lockout settings apply to both domain and local users?

Safeguard has detected a RAID warning and a DEGRADED Alert may be seen.

Safeguard fails to import Directory User Group with Invalid Primary Authentication Provider error

This hotfix includes the changes outlined in the following sections. One Identity may generate additional hotfixes for future releases of the...

On the 1st of December 2019, One Identity Starling started to use a new web SSL certificate, signed by the Sectigo certificate authority. Safeguard...

Safeguard patch precondition checks verify that certain conditions are met so that patching will be successful. This is to ensure there are no...

On the 1st of December 2019, One Identity Starling will use a new web SSL certificate, signed by the Sectigo certificate authority.

When the Safeguard is in the background, and a Review popup is shown, the "Review" button doesn't work when clicked.

When using an Session Access Request Policy, and ticking "Include password release with session requests". If the password was revealed to...

Requesting the ability to configure different starting values, in an effort to prevent overlap and confusion of Asset and Account IDs in Prod, UAT...

Request for status indicator in the Cluster Management screen to indicate what % complete and/or a Total GB vs GB Sent or Received by Replica when...

Relocate and updating the ip address of the safeguard appliance.

RelayState Parameter in SAML

Rebuilding a Safeguard Cluster from backup

This KB article applies to Hyper-V and VMware platforms only (not hardware appliances or cloud VMs). If you upgrade to v6.0 then restore a v2.x...

When performing a RDP session though Safeguard the Desktop Background is disabled.  Is it possible to globally modify the RDP file to adjust this...

It may cause problems in RDP connections and usage of credential stores (including SPS-SPP joint operations) if the patches for handling CVE-2018...

Sometimes when the downloaded RDP file from SPP WebUI is ran, an error message pops up "Authentication failed". Sometimes it works after...

Using an Okta Radius server in Safeguard that is configured with Radius as Primary setting, when attempting to authenticate to Safeguard the...

Questions about Safeguard Desktop Player and session recordings. 1. How are the files downloaded from the appliance? Is it using an Internet...

Questions about Offline Workflow Mode feature in SPP. What is Offline Workflow Mode? Are passwords handled "business as usual" in Offline...

UserA has ownership to account called A. UserA can see asset management account A. UserB, has ownership to account called B. UserB can see...

If the notification is not clicked / tapped when the screen is locked and instead the screen is unlocked it appears that the ability to approve the...

When trying to connect to a Windows server through a PSM request, the client receives the following error: "The connection has been terminated...

PSM Fails when using an account that is a member of the "Protected Users" AD Security Group, when attempting to connect the error is shown...

Is it possible to integrate Safeguard with Identity Manager for attestations? Customer has One Identity Manager and Safeguard. Request is to set...

The primary provider names must match for a Safeguard for Privilege Sessions (SPS) 6.6 initiated RDP connection with Safeguard for Privilege...

When attempting to apply an upgrade patch, the following error was found in the logs,  " This action is not allowed at this time. A cluster data...

Error received when attempting to enroll an appliance as a Replica in a Cluster,   " The appliance found at <IP address> has already joined a...

Users are not able to request passwords and receive the error, "Server timeout during read query at consistency LocalOne (0 replica(s) responded...

Error when trying to importing a new certificate in SPP, "Certificate chain is not trusted. Reason: (PartialChain) A certificate chain could not be...

When attempting to upload an upgrade patch through the Safeguard Desktop Client, the following error is received, "The update cannot be applied...

Attempting to modify the service account configured for an Asset Discovery Job. When attempting to make this change through the Desktop Client UI...

When performing a Check Connection on a managed Windows Asset in SPP, it fails with the following error,  "System.Runtime.InteropServices...

Error when importing assets via .CSV using Assets | Import Assets Button | CSV Template Assistant errors "Value cannot be null Paramater name...

Error when importing External Federation metadata.xml generated by PingID (PingIdentity). Error: An error occurred while testing the...

When attempting to connect to a session getting the error: "Using keyboard-interactive authentication. Password: Access denied Using...

After upgrading there is an error when attempting to connect to a RDP / SSH session in Safeguard 6.6  "The selected Access Request Policy...

When attempting to execute Safeguard PowerShell commandlets, the following error is received, "Unauthorized -- 60094: Authorization is denied for...

When attempting to upload an upgrade patch through the Safeguard Desktop Client, it fails with the error, "The update cannot be applied: The...

Error when attempting a SPS session through SPP: "This computer can't connect to the remote computer. Try connecting again. If the problem...

When using "Add to Favorites" the error "You are not authorized to create a session request for account 'id' on system 'id. (60941)" is shown...

From 6.9 when using the thick client to connect to Safeguard the following error is shown: "The SSL/TLS connectiion to xxx is not secure due to...

When connecting to a RDP session the following popup is seen: "The publisher of this remote connection can't be identified. Do you want to...

Error joining to SPP:SPS has failed to join to SPP. For more information, see the error details. (JoinFailed) Error details: The session...

Error joining to SPS to SPS "Authorization is denied for this request" Despite the user credentials entered having the correct permissions the...

In this example a certificate has been issued with a CRL Distribution Point (CDP) extension pointing to an LDAP end point. Using the built-in...

Is IBM DB2 supported by Safeguard as a platform?

Is it possible to schedule entitlement reports like activity reports? Is this functionality available today?

Is it possible to use an Access Request Policy to block file transfers in only one direction (such as block downloads but allow uploads)?

When deleting a root CA certificate for a SQL or PostgreSQL managed asset, the connection from Safeguard to the target system will still...

Keep the following considerations in mind when performing the enroll replica and unjoin replica operations to create a Safeguard cluster

What ports are required for communication between Safeguard cluster members?