Anti Cross-Site Request Forgery token error
If you receive an Anti Cross-Site Request Forgery token error when attempting to log into Safeguard for Privileged Passwords using Microsoft Internet Explorer 9 on Windows 7 SP1, this indicates that cookies are blocked.
To resolve this issue
- In Internet Explorer, open Tools and choose Internet Options.
- In the Privacy tab, click the Advanced button.
- Select the Always allow session cookies option.
The most common causes of failure in Safeguard for Privileged Passwords
are either connectivity issues between the appliance and the managed system, or problems with service accounts.
Always verify network connectivity and asset power before troubleshooting.
The following topics explain some possible reasons that Check Password, Change Password, and Set Password could fail and gives you some corrective steps you can take.
Change password fails
A local account password change can fail when you are using a Windows asset that is configured with a service account with Administrative privileges, other than the built-in Administrator.
Note: Before Safeguard for Privileged Passwords can change local account passwords on Windows systems, using a member of an administrators group other than built-in Administrator, you must change the local security policy to disable User Account Control (UAC) Admin Approval Mode ("Run all administrators in Admin Approval Mode") option.
To configure Windows assets to change account passwords
Run secpol.msc from the Run dialog,
From the Windows Start menu, open Local Security Policy.
- Navigate to Local Policies | Security Options.
- Disable the "User Account Control: Run all administrators in Admin Approval Mode" option.
- Restart your computer.
For more information, see Prepare Windows systems.
Incorrect authentication credentials
You must have the correct user name and password to authenticate to an asset.
To resolve incorrect service account credentials
- Verify the service account credentials match the credentials in Safeguard for Privileged Passwords asset information (Administrative Tools | Assets | Connection). For more information, see About service accounts.
- Perform Test Connection to verify connection. For more information, see About Test Connection.
- Attempt to check, change, and set password again. For more information, see Checking, changing, or setting an account password.