A local account password change can fail when you are using a Windows asset that is configured with a service account with Administrative privileges, other than the built-in Administrator.
|
Note: Before Safeguard for Privileged Passwords can change local account passwords on Windows systems, using a member of an administrators group other than built-in Administrator, you must change the local security policy to disable User Account Control (UAC) Admin Approval Mode ("Run all administrators in Admin Approval Mode") option. |
To configure Windows assets to change account passwords
Run secpol.msc from the Run dialog,
-OR-
From the Windows Start menu, open Local Security Policy.
For more information, see Prepare Windows systems.
You must have the correct user name and password to authenticate to an asset.
To resolve incorrect service account credentials
If a Safeguard for Privileged Passwords asset requires an SSH host key and does not have one, Safeguard for Privileged Passwords will not be able to communicate with the asset. For more information, see Certificate issue.
To resolve missing SSH host keys
To verify that an asset has an SSH host key, select the asset and look under Connection on the General view. If there is no SSH Host Key Fingerprint displayed, you need to add one.
Choose any authentication type (except None) and enter required information.
|
NOTE: You must enter the service account password again. |
Click Test Connection.
Test Connection verifies that the appliance can communicate with the asset.
Confirm that you accept the SSH host key.
|
Note: To bypass the SSH host key verification and automatically accept the key, click the Auto Accept SSH Host Key option. |
To resolve incorrect SSH host keys
Safeguard for Privileged Passwords uses the following host key algorithms for key exchange:
To correct a mismatched SSH host key, run Test Connection.
If you receive an error message that says, "There is no cipher supported by both: client and server", refer to Cipher support.
© 2021 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy