Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 2.5 - Administration Guide

Introduction System requirements Installing the One Identity Safeguard for Privileged Passwords desktop client Setting up Safeguard for Privileged Passwords for the first time Getting acquainted with the console Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Directories Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificate settings Cluster settings External Integration settings Messaging settings Profile settings Access settings Sessions settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions
How do I access the API How do I audit transaction activity How do I configure external federation authentication How do I manage accounts on unsupported platforms How do I modify the appliance configuration settings How do I prevent Safeguard for Privileged Passwords messages when making RDP connections How do I see which assets and/or accounts are governed by a profile How do I set the appliance system time How do I setup discovery jobs How do Safeguard for Privileged Passwords database servers use SSL What are the access request states What do I do when an appliance goes into quarantine What is required for One Identity Safeguard for Privileged Passwords, embedded sessions module What is required to integrate with Starling Identity Analytics & Risk Intelligence What needs to be set up to use Application to Application What role-based email notifications are generated by default When does the rules engine run for dynamic grouping and tagging Why did the password change during an open request Why join Safeguard for Privileged Passwords to One Identity Starling
Safeguard Desktop Player Appendix: Safeguard ports

Time

Time displays the current appliance time and allows you to enable Network Time Protocol (NTP) and set the primary and secondary NTP servers. In addition, when enabled, the NTP client status can be displayed.

It is the responsibility of the Appliance Administrator to manage the appliance time.

Note: A warning will appear if your local time is not within 5 minutes of the appliance time. One Identity recommends that you set an NTP server to eliminate possible time-related issues.

NOTE: Clustered environments: NTP setting changes are made on the primary appliance in a cluster. When a replica appliance is enrolled into the cluster, it points to the primary appliance's VPN IP address as the Primary NTP Server and the NTP client service is enabled on the replica appliance. When performing a failover operation to promote a replica to be the new primary, the Primary NTP Server is preserved and applied from the 'old' primary appliance.

To enable Network Time Protocol (NTP) and set the primary and secondary NTP servers

  1. Navigate to Administrative Tools | Settings| Appliance | Time.
  2. Select the Enable Network Time Protocol (NTP) check box to enable NTP.
  3. Provide the following information:

    • Primary NTP Server: Enter the IP address or DNS name of the primary NTP server.
    • Secondary NTP Server: (Optional) Enter the IP address or DNS name of the secondary NTP server.
  4. Click OK to save your selections.

    When NTP is enabled, the following information about the NTP client status is displayed:

    • Last Sync Time
    • Leap Indicator
    • Poll Interval
    • Precision
    • Reference ID
    • Root Delay
    • Root Dispersion
    • Source
    • Stratum

    NOTE: Select Show Details and Hide Details to display more or less information.

Related Topics

How do I set the appliance system time

Updates

It is the responsibility of the Appliance Administrator to update or upgrade One Identity Safeguard for Privileged Passwords by installing an update file to modify the software or configuration of the running appliance.

Download the latest update from: https://support.oneidentity.com/one-identity-safeguard/.

NOTE: Clustered environment: Apply the patch so all appliances in the cluster are on the same version. The procedure for patching cluster members depends on the Safeguard for Privileged Passwords version you are currently running.

  • If you are running Safeguard for Privileged Passwords 2.0.1.x or earlier, you must unjoin replica appliances, install the patch on each appliance, and then enroll the replica appliances to rebuild your cluster. For more information, see Patching cluster members in the One Identity Safeguard for Privileged Passwords 2.0 Administration Guide.
  • If you are running Safeguard for Privileged Passwords 2.1.x or 2.2.x, you can use the enhanced cluster patching feature where unjoining replica appliances is no longer required. For more information, see Patching cluster members.

Important: Always back up your system before you install an update file. For more information, see Backup and Restore.

To install an update file

  1. Navigate to Administrative Tools | Settings| Appliance | Updates.

    The current appliance and client versions are displayed.

  2. Click Upload a File and browse to select an update file.

    Note: When you select a file, Safeguard for Privileged Passwords uploads it to the server, but does not install it.

  3. Once the file has successfully uploaded, click one of the following:
    • Install Now to install the update file.

      Note: Once you install an update file, you cannot uninstall it.

    • Remove to delete the file from the server without installing it.

    The Updates pane shows the upgrade progress and when the appliance has been successfully upgraded.

Asset Management settings

Use the Asset Management settings to configure the schedule and settings used by discovery jobs that find privileged accounts or systems on your network, and to define and manage dynamic tags.

Navigate to Administrative Tools | Settings| Asset Management.

Table 149: Asset Management settings
Setting Description

Account Discovery

Where you configure the rules Safeguard for Privileged Passwords uses to perform asset account discovery.

NOTE: The rules configured here only apply to asset accounts. For more information on configuring discovery rules for directory accounts, see Managing directory account discovery jobs.

Custom Platforms

Where you add a custom platform.

Directory Tags

Where you view and manage dynamic tags for directory accounts.

Tags

Where you view and manage dynamic tags for assets and asset accounts.

Account Discovery

Account Discovery settings are the rules Safeguard for Privileged Passwords uses to perform account discovery against the assets that are in the scope of a partition profile.

There are two ways to configure and schedule account discovery jobs:

  • You can set up discovery rules in Settings | Asset Management | Account Discovery and then add them to a profile or
  • You can add a new discovery setting as you create a new profile.

You can configure the setting to perform the following:

  • Automatically add all the discovered accounts to Safeguard for Privileged Passwords for management, or you can configure the setting to allow you to manually include the discovered accounts.

Navigate to Administrative Tools | Settings| Asset Management | Account Discovery. The Account Discovery Settings pane displays the following about the listed account discovery settings.

Table 150: Account Discovery Settings: Properties
Property Description
Partition

The partition on which Safeguard for Privileged Passwords runs the selected account discovery setting.

Name

The name of the account discovery setting.

Description

Information about the selected account discovery setting.

Schedule

Displays the selected account discovery setting's schedule.

Use these toolbar buttons to manage the account discovery settings.

Table 151: Account Discovery Settings: Toolbar
Option Description
Add Account Discovery Setting

Add an account discovery setting. For more information, see Adding an asset account discovery setting.

Delete Selected

Remove the selected account discovery setting.

Refresh

Update the list of account discovery settings.

Edit

Modify the selected account discovery setting.

Copy

Clone the selected account discovery setting.

Related Topics

Account and service discovery job workflow

Creating a partition profile

Related Documents