Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 6.0.9 LTS - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Search box Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Discovery Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificate settings Cluster settings External Integration settings Messaging settings Profile settings Safeguard Access settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions SPP glossary

Removing a trusted certificate

To remove certificates from the appliance

  1. Navigate to Administrative Tools | Settings | Certificates | Trusted Certificates.
  2. Select a certificate.

  3. Click  Delete Selected from the details toolbar.

    IMPORTANT: Safeguard for Privileged Passwords does not allow you to remove built-in certificate authorities.

Cluster settings

Use the Cluster settings to create a clustered environment, to monitor the health of the cluster and its members, and to define managed networks for high availability and load distribution.

It is the responsibility of the Appliance Administrator or the Operations Administrator to create a cluster, monitor the status of the cluster, and define managed networks.

Before creating a Safeguard for Privileged Passwords cluster, become familiar with the Disaster recovery and clusters chapter to understand:

Navigate to Administrative Tools | Settings | Cluster.

Table 140: Cluster settings
Setting Description

Cluster Management

Where you create and manage a cluster and monitor the health of the cluster and its members.

Managed networks

Where you define managed networks to distribute the task load for the clustered environment.

Offline Workflow (automatic)

Where you configure Offline Workflow Mode to automatically trigger if an appliance has lost consensus (quorum) and, optionally, automatically resume online workflow. You can also manually Enable Offline Workflow and Resume Online Operations from this dialog. For more information, see About Offline Workflow Mode.

Session Appliances with SPS join

Where you view, edit, and delete join connections when a Safeguard for Privileged Sessions (SPS) cluster is joined to a Safeguard for Privileged Password (SPP) for session recording and auditing. For more information, see SPP and SPS sessions appliance join guidance.

Cluster Management

Navigate to Administrative Tools | Settings | Cluster | Cluster Management.

The Cluster Management page is divided into left and right panes. If you do not see the right pane, click an appliance node in the left pane.

The health indicators on the nodes indicate if cluster members are in an error, warning, locked, or healthy state.

  • Cluster view pane: The left pane displays a graphical representation of the primary and replica appliances belonging to the cluster.

  • Appliance details and cluster health pane: The right pane displays details about the appliance selected in the left pane. From this pane you can run maintenance and diagnostic tasks against the selected appliance.

Cluster Management toolbar

Use these toolbar buttons on the Cluster Management page to manage the members of a cluster.

Table 141: Cluster Management: Toolbar
Option Description

Back

Return to the main Settings view.

Add Replica

Join an appliance to the primary appliance as a replica. For more information, see Enrolling replicas into a cluster.

Refresh

Update the list of appliances in a cluster.

Reset Cluster

Reset a cluster to recover a cluster that has lost consensus. For more information, see Resetting a cluster that has lost consensus.

 Caution: Resetting a cluster should be your last resort. It is recommended that you restore from a backup rather than reset a cluster.

Enable Offline Workflow

(appliance has lost consensus)

Manually place the appliance in Offline Workflow Mode. The appliance will run in isolation from the rest of the cluster. For more information, see Manually control Offline Workflow Mode.

Resume Online Operations (appliance is in Offline Workflow Mode)

Manually reintegrate the appliance with the cluster and merge audit logs. For more information, see To manually resume online operations.

Cluster view pane

Navigate to Administrative Tools | Settings | Cluster | Cluster Management.

Initially, the Cluster view pane (left pane) displays a single primary node for the appliance you are currently logged in to. As you join appliances to the cluster, replica nodes will be shown as being connected to the primary node.

The health indicators on the nodes and in the upper-right corner of this pane provide a quick view as to whether cluster members are in an error, warning, or healthy state.

A warning icon identifies a potential issue with the cluster. An error icon indicates a definite problem impacting the functionality of the cluster. A lock icon indicates the cluster is locked. Expand the View More section to see more details.

Clicking a member of the cluster in this pane displays details about the appliance and the health of the cluster member. For more information, see Appliance details and cluster health pane.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating