Chat now with support
Chat with Support

The Quest and One Identity Support Portals will be unavailable on Friday July 10, 2020 from 5:30 PM to 6:30 PM for website maintenance.

One Identity Safeguard for Privileged Passwords 2.4 - Administration Guide

Introduction System requirements Installing the One Identity Safeguard for Privileged Passwords desktop client Setting up Safeguard for Privileged Passwords for the first time Getting acquainted with the console Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Directories Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificate settings Cluster settings External Integration settings Messaging settings Profile settings Access settings Sessions settings
Users User Groups Disaster recovery Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions
How do I access the API How do I audit transaction activity How do I configure external federation authentication How do I manage accounts on unsupported platforms How do I modify the appliance configuration settings How do I prevent Safeguard for Privileged Passwords messages when making RDP connections How do I see which assets and/or accounts are governed by a profile How do I set the appliance system time How do I setup discovery jobs How do Safeguard for Privileged Passwords database servers use SSL What are the access request states What do I do when an appliance goes into quarantine What is required for One Identity Safeguard for Privileged Passwords Privileged Sessions What is required to integrate with Starling Identity Analytics & Risk Intelligence What needs to be set up to use Application to Application What role-based email notifications are generated by default When does the rules engine run for dynamic grouping and tagging Why did the password change during an open request Why join Safeguard for Privileged Passwords to One Identity Starling
Safeguard Desktop Player Appendix: Safeguard ports

Power options

Use the power options in the recovery kiosk to remotely restart or shut down the appliance.

  • You can use the Reboot option in the recovery kiosk to restart the appliance if you cannot access the Safeguard for Privileged PasswordsWindows desktop client, web client, or API to restart the appliance using the normal procedures.
  • You must use the Shut Down option in the recovery kiosk to shutdown the appliance.

Rebooting the appliance

If you cannot access the Safeguard for Privileged Passwords Windows desktop client, web client, or API to restart the appliance using the normal procedures, you can restart the appliance from the recovery kiosk.

To reboot the appliance

  1. From the recovery kiosk, select the Power Options | Reboot option.
  2. Right arrow.
  3. When prompted, select Yes to start the reboot or No to return to the main option screen.

Shutting down the appliance

You must use the recovery kiosk to manually shutdown the Safeguard for Privileged Passwords 2000 Appliance.

To shut down the appliance

  1. From the recovery kiosk, select the Power Options | Shut Down option.
  2. Right arrow.
  3. When prompted, select Yes to shut down the appliance or No to return to the main option screen.

Admin password reset

If your bootstrap administrator's password is locked out, you can reset it to the initial password.

IMPORTANT: This is a challenge response operation, where Safeguard for Privileged Passwords generates a challenge that is then sent to One Identity Support to get a response back. You must then copy and paste this challenge response into the kiosk screen in order to proceed. Please keep the following information in mind when performing a challenge response operation:

  • A challenge response is only good for 24 hours.
  • Do not navigate away from the kiosk or refresh the kiosk during a challenge response operation. Doing so will invalidate the challenge response.

NOTE: If a user has not logged onto Safeguard for Privileged Passwords for a set number of days, Safeguard for Privileged Passwords disables the user account. This is set using the Disable After setting in Administrative Tools | Settings | Safeguard for Privileged Passwords Access | Login Control.

To reset the bootstrap admin password

  1. From the recovery kiosk, select the Admin Password Reset option.
  2. Right arrow.
  3. At id, enter your identification and press the Tab key (or down arrow).

  4. At Get Challenge, press the Enter key.

    Safeguard for Privileged Passwords produces a challenge.

  5. Copy and paste the challenge and send it to One Identity Support.

  6. When you get the response from One Identity Support, copy and paste the response into the kiosk screen and select Reset Password.

One Identity Support resets the bootstrap administrator's password back to Admin123.

 NOTE: Best practice: To keep your Safeguard for Privileged Passwords Appliance secure, change the default password for the bootstrap administrator’s account.
Related Documents