Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 7.0.3 LTS - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Home Privileged access requests Appliance Management
Appliance Backup and Retention Certificates Cluster Enable or Disable Services External Integration Real-Time Reports Safeguard Access Appliance Management Settings
Asset Management
Account Automation Accounts Assets Partitions Discovery Profiles Tags Registered Connectors Custom platforms
Security Policy Management
Access Request Activity Account Groups Application to Application Cloud Assistant Asset Groups Entitlements Linked Accounts User Groups Security Policy Settings
User Management Reports Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP and SPS join guidance Appendix C: Regular Expressions About us

Installing a Hardware Security Module client certificate

To install a Hardware Security Module client certificate

  1.  Go to Client Certificates:
    • web client: Navigate to Certificates > Hardware Security Module Certificates > Client Certificates.

  2. Click Add Certificate.

  3. For Client Public Key, click Upload File.
  4. Select the client certificate public key file and click Open.
  5. For Client Private Key, click Upload File.
  6. Select the client certificate private key file and click Open.

  7. On the Add Client Certificate dialog, click OK. After the certificate has been uploaded, you need to assign the certificate to one or more appliances. For more information, see Assigning a Hardware Security Module client certificate

Assigning a Hardware Security Module client certificate

Safeguard for Privileged Passwords allows you to assign Hardware Security Module client certificates that you have previously uploaded to any appliance in your clustered environment.

To assign a client certificate to appliances

  1.  Go to Client Certificates:
    • web client: Navigate to Certificates > Hardware Security Module Certificates > Client Certificates.

  2. Select a certificate and click Assign Certificate to Appliance(s).

  3. In the Assign Certificate to Appliances dialog, select one or more appliances.

  4. Click OK.

Uploading a Hardware Security Module server certificate

Safeguard for Privileged Passwords allows you to upload Hardware Security Module server certificates.

To upload a Hardware Security Module server certificate

  1.  Go to Server Certificates:
    • web client: Navigate to Certificates > Hardware Security Module Certificates > Server Certificates.

  2. Click Upload Certificate.

  3. Select the server certificate and click Open.

SMTP Certificate

Initially, the default self-signed SMTP client certificate used is listed and assigned to the appliance. This default certificate is not a trusted certificate and should be replaced.

Considerations:

  • The remote certificate must have a valid CN and/or DNS SAN and it must publish a CRL if the following is true:
    • TLS (STARTTLS or SMTPS) is used with SMTP
    • Verify SMTP Server Certificate is selected on Appliance Management > External Integration > Email.
  • Safeguard for Privileged Passwords supports cipher suites for SMTP TLS in both the default mode and the TLS 1.2 mode. For more information, see Cipher support.

  • If a managed domain account is being used for SMTP user authentication, the remote SMTP server must accept the username in the form user@domain.

Go to SMTP Certificate:

  • web client: Navigate to Certificates > SMTP Certificate.

The SMTP Certificate pane displays the following information for the SMTP client certificates stored in the database.

Table 32: SSL Certificates: Properties
Property Description
Refresh

Update the list of SMTP client certificates available (uploaded to Safeguard for Privileged Passwords).

Subject

The name of the subject (such as user, program, computer, service, or other entity) assigned to the certificate when it was requested.

Thumbprint

A unique hash value that identifies the SMTP client certificate.

Add Certificate

Click Add Certificate and select one of the following options to replace the default SMTP client certificate with a new certificate:

  • Install Certificate generated from CSR
  • Install Certificate with Private Key
  • Create Certificate Signing Request (CSR)

Use Default

Click to return to the Safeguard for Privileged Passwords default SMTP client certificate.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating