One Identity recommends the following resolutions to some of the common problems you may encounter as you deploy and use Safeguard for Privileged Passwords. For more information about how to troubleshoot Safeguard for Privileged Passwords, refer to the Appliance settings.
Cross-site request forgery (CSRF) occurs when unauthorized commands are transmitted from a user that the web application trusts. Anti-CSRF is a type of CSRF protection. It is a random string that is only known by the user's browser and the web application
If you receive an Anti Cross-Site Request Forgery token error when attempting to log in to Safeguard for Privileged Passwords using Microsoft Internet Explorer 9 on Windows 7 SP1, this indicates that cookies are blocked.
To resolve this issue
- In Internet Explorer, open Tools and choose Internet Options.
- In the Privacy tab, click the Advanced button.
- Select the Always allow session cookies option.
The most common causes of failure in Safeguard for Privileged Passwords
are either connectivity issues between the appliance and the managed system, or problems with service accounts.
Always verify network connectivity and asset power before troubleshooting.
The following topics explain some possible reasons that Check Password, Change Password, and Set Password may fail, and gives you some corrective steps you can take.
A local account password change can fail when you are using a Windows asset that is configured with a service account with Administrative privileges, other than the built-in Administrator.
Note: Before Safeguard for Privileged Passwords can change local account passwords on Windows systems, using a member of an administrators group other than built-in Administrator, you must change the local security policy to disable User Account Control (UAC) Admin Approval Mode (Run all administrators in Admin Approval Mode) option.
To configure Windows assets to change account passwords
Run secpol.msc from the Run dialog,
From the Windows Start menu, open Local Security Policy.
- Navigate to Local Policies | Security Options.
- Disable the User Account Control: Run all administrators in Admin Approval Mode option.
- Restart your computer.
For more information, see Preparing Windows systems.