The password and SSH key management settings Appliance Management > Enable or Disable Services enable the automatic profile check and change schedules in partitions.
Ensure the password and SSH key management settings are enable for profiles to run on schedule:
Safeguard for Privileged Passwordsprovides a Recovery Kiosk (Serial Kiosk) with the following options.
Factory reset from the Recovery Kiosk: Allows you to recover from major problems or to clear the data and configuration settings on the appliance.
Factory reset is not available for virtual appliances. Virtual appliances are backed up and can be recovered. For more information, see Virtual appliance backup and recovery.
|
|
Caution: Care should be taken when performing a factory reset against a physical appliance, because this operation removes all data and audit history, returning it to its original state when it first came from the factory. Performing a factory reset will NOT reset the BMC/IPMI interface or the IP address. However, the BMC/IPMI interface will need to be reenabled after the reset has completed (for more information, see Lights Out Management (BMC)). The appliance must go through configuration again as if it had just come from the factory. For more information, see Setting up Safeguard for Privileged Passwords for the first time. In addition, performing a factory reset may change the default SSL certificate and default SSH host key. The appliance resets to the current Long Term Support (LTS) version. For example, if the appliance is running version 6.6 (feature release) or 6.0.6 LTS (maintenance Long Term Support release) and then factory reset, the appliance will reset down to 6.0 LTS and you will have to patch up to your desired version. For more information, see Long Term Support (LTS) and Feature Releases. |
To start the Recovery Kiosk
On the terminal or laptop running the Recovery Kiosk, you must configure your serial port settings as follows:
On the laptop or terminal, configure the serial port settings as follows:
These options display on the Recovery Kiosk screen:
Power Options
Safeguard for Privileged Passwords provides these keyboard shortcuts. If you make the window too small to accommodate the kiosk elements, Safeguard for Privileged Passwords tells you how to readjust the window size.
Ctrl + D: Resets the kiosk to its original state. Clears challenges and options.
|
|
Caution: When resetting the Bootstrap Administrator's password or performing a factory reset, if you reset the kiosk before you receive the response from One Identity Support, you must submit a new challenge. |
Use the Appliance Information option on the Recovery Kiosk to view basic appliance information and edit the IP addresses.
If you are using Azure, configure the SPP VM with a static IP address in Azure. If you need to change the IP address of the Safeguard appliance, or if it changes due to dynamic configuration in Azure, and the appliance is part of a cluster, the appliance will automatically reset to Standalone Read-only mode on the next boot (effectively leaving the cluster). The Administrator can join the appliance back to the cluster.
To view or edit the appliance information
Right-arrow to see:
After editing the network interface properties, click Submit.
Once the updates are completed, a Network interface update request accepted message is displayed.
Use the power options in the Recovery Kiosk to remotely restart or shut down the physical appliance or AWS or Azure virtual deployment.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center
