One Identity Safeguard for Privileged Passwords 2.9 - Administration Guide

Reasons

In an access request policy, a Security Policy Administrator can require that a requester provide a reason for requesting access to a password or session. Then, when requesting access, the user can select a predefined reason from a list. For example, you might use these access request reasons:

• Software Updates
• System Maintenance
• Hardware Issues
• Problem Ticket

To configure access request reasons

1. Navigate to Administrative Tools | Settings | Access Request | Reasons.
2. Click Add Reason to add a new reason.
3. In the Reason dialog, enter the following:

   1. Name: Enter a name for the reason.

      Limit: 50 characters

      Required

   2. Description: Enter a description for the reason.

      Limit: 255 characters

      Required

4. Click Add Reason.

5. To edit a reason, click Edit Reason.

   The Reason dialog appears allowing you to modify the name or description.

6. To delete a reason, click Delete Reason.

   In the confirmation dialog, click Yes.

Appliance settings

Use the Appliance settings to view general information about the appliance, run diagnostic tools, and reset or update the One Identity Safeguard for Privileged Passwords hardware appliance.

Safeguard for Privileged Passwords can be set up to use a virtual appliance. For more information, see Using the virtual appliance and web management console.

Navigate to Administrative Tools | Settings | Appliance.

One Identity Safeguard for Privileged Passwords provides the following information to help you resolve many common problems you may encounter as you deploy and use your appliance.

In addition to the appliance options, One Identity Safeguard for Privileged Passwords provides these troubleshooting tools:

Appliance Diagnostics

Appliance Administrators can execute a trusted, secure appliance diagnostics package to help solve issues with configuration, synchronization, and clustering as well as other other internal challenges. The appliance diagnostics package is available from the web support kiosk, not the serial kiosk. The appliance diagnostics package can be used even when the appliance is in quarantine. To protect against external threats, Safeguard rejects illegitimate appliance diagnostics packages. The manifest file in the appliance diagnostics package lists criteria which may include the minimum Safeguard version, appliance ID, and expiration timestamp UTC. New product code and database changes are not included in an appliance diagnostics package.

Navigate to Administrative Tools | Settings | Appliance | Appliance Diagnostics.

1. The state of the appliance displays (for example, Online). Click Refresh to update the state.
2. If no appliance diagnostics package has been loaded, click Upload Diagnostics, select the appliance diagnostics package file which has an .sgd extension, then click Open.
   • If the upload criteria is not met, the appliance diagnostics package is not uploaded and a message like the following displays: The minimum Safeguard version needed to run this diagnostic package is <version>.
   • If the upload is successful, the Diagnostic Package Information displays with the Status of Staged. You can:
     • Select Execute and wait until the Status changes to Completed or Error.
     • Select Remove to delete the appliance diagnostics package and the associated log file.
3. Once uploaded, you can perform these activities.
   • If the Expiration Date has not passed, you can select Execute to execute the appliance diagnostics package again.
   • Select Delete to delete the appliance diagnostics package, the associated log file, and stop any appliance diagnostics package that is running. Before uploading a different appliance diagnostics package, you must delete the current one because there can be only one appliance diagnostics package per appliance.
   • Select Download Log to save the log file. Audit log entries are available through the Activity Center during and after execution and are part of the appliance history. A log is also available during and after execution until the diagnostic package has been deleted.

Appliance Information

It is the responsibility of the Operations Administrator or the Appliance Administrator to monitor the status of the appliance.

Navigate to Administrative Tools | Settings | Appliance | Appliance Information. The following displays on the top of the Appliance Information pane.

In addition, this view contains two tabbed pages to display general information and performance data for the appliance.

Appliance: General tab properties

Disk displays the amount of used and free disk space.

Power

Use the power controls to shut down or restart your appliance.

• For more information on shutting down the appliance, see Shutting down the appliance.
• For more information on restarting the appliance, see Restarting the appliance.

Appliance: Performance tab properties