Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 6.0.12 LTS - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Search box Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Discovery Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificate settings Cluster settings External Integration settings Messaging settings Profile settings Safeguard Access settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions SPP glossary

Factory reset from the Recovery Kiosk

There is a Factory Reset selection in the Recovery Kiosk. Factory Reset allows you to reset a Safeguard for Privileged Passwords hardware appliance to recover from major problems or to clear the data and configuration settings on the appliance.

Factory reset is not an option for virtual appliances. You will need to redeploy the appliance.

Caution: Care should be taken when performing a factory reset against a physical appliance, because this operation removes all data and audit history, returning it to its original state when it first came from the factory. Performing a factory reset will NOT reset the BMC/IPMI interface or the IP address. However, the BMC/IPMI interface will need to be reenabled after the reset has completed (for more information, see Lights Out Management (BMC)). The appliance must go through configuration again as if it had just come from the factory. For more information, see Setting up Safeguard for Privileged Passwords for the first time.

In addition, performing a factory reset may change the default SSL certificate and default SSH host key.

The appliance resets to the current Long Term Support (LTS) version. For example, if you are using version 6.6 (feature release) or 6.0.6 LTS (maintenance Long Term Support release) and then factory reset, you appliance will reset down to 6.0 LTS and you will have to patch up to your current version. For more information, see Long Term Support (LTS) and Feature Releases.

Factory reset on a clustered appliance

Performing a factory reset on a clustered hardware appliance will not automatically remove the appliance from a cluster. The recommended best practice is to unjoin an appliance from the cluster before performing a factory reset on the appliance. After the unjoin and factory reset, the appliance must be configured again. For more information, see Setting up Safeguard for Privileged Passwords for the first time.

To perform a factory reset from the Recovery Kiosk

  1. To perform a hardware factory reset, go to the Recovery Kiosk. For more information, see Recovery Kiosk (Serial Kiosk).

  2. Select Factory Reset.

  3. Press the right arrow.

  4. At id, enter your email or name and press the Tab key (or down arrow).

  5. At Get Challenge, press the Enter key. Safeguard for Privileged Passwords produces a challenge.

  6. Copy and paste the challenge and send it to One Identity Support.

    • A challenge response is only good for 48 hours.

    • Do not navigate away from the page or refresh during a challenge response operation. Doing so will invalidate the challenge response.

  7. When you get the response from One Identity Support, copy and paste the response into the kiosk screen and select Factory Reset.

Support bundle

Prior to using the Support Bundle function, set up a Windows share where the support bundle is to be sent.

To generate a support bundle

  1. From the Recovery Kiosk, select the Support Bundle option.
  2. Press the right arrow.

  3. Select the type of support bundle to be generated:

    • Support Bundle
    • Quarantine Bundle

  4. When prompted, enter the following information:

    • Address: Enter the address of the Windows share (<IP Address>\<ShareName>) where the support bundle is to be saved.
    • User: Enter the user name to be used to access the Windows share.

    • Password: Enter the password associated with the specified user account.

      NOTE: If you set up the Windows share to allow anonymous access, you will not be prompted to enter a user name or password.

  5. Select Copy to Share. When completed, a message appears stating that a support bundle has been sent to the specified share.

Replica not adding

If you receive a persistent message that says, An internal request has timed out... when you attempt to add an appliance to a cluster, ensure that the appliance is at the same version of Safeguard for Privileged Passwords as the primary. All members of a cluster must be the same.

System services did not update or restart after password change

If the system services do not update or restart after an automatic password change, first check your audit logs in the Activity Center.

NOTE: You can also check the Support bundle logs.

If the audit logs do not adequately explain the problem, then check the options on the Change password tab of the profile that governs the service account. For more information, see Creating a profile.

For service accounts that run system services or scheduled system tasks, verify the options on the profile's Change password tab that enable or disable automatic service update, or restart. You must update the Change Password Setting to change these options. For more information, see Change Password.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating