One Identity Safeguard for Privileged Passwords 2.9 - Administration Guide

Factory Reset from the desktop client

As an Appliance Administrator, you can use the Factory Reset feature to reset a Safeguard for Privileged Passwords Appliance to recover from major problems or to clear the data and configuration settings on the appliance.

Factory reset on a clustered appliance

Performing a factory reset on a clustered hardware appliance will not automatically remove the appliance from a cluster. The recommended best practice is to unjoin an appliance from the cluster before performing a factory reset on the appliance. After the unjoin and factory reset, the appliance must be configured again. For more information, see Setting up Safeguard for Privileged Passwords for the first time.

To perform a factory reset from the desktop client

1. Navigate to Administrative Tools | Settings | Appliance | Factory Reset.
2. Click Factory Reset.

3. In the Factory Reset confirmation dialog, enter the words Factory Reset and click OK.

   The appliance will go into Maintenance mode to revert the appliance. Once completed, you will be prompted to restart the desktop client. If the appliance had been in a cluster, you may need to unjoin the factory reset appliance. The factory reset appliance must be configured again. For more information, see Setting up Safeguard for Privileged Passwords for the first time. In addition, when you log into the appliance, you will be prompted to add your Safeguard for Privileged Passwords licenses.

Licensing

It is the responsibility of the Appliance Administrator to manage the Safeguard for Privileged Passwords licenses. For more information, see Product licensing.

To avoid disruptions in the use of Safeguard for Privileged Passwords, the Appliance Administrator must configure the SMTP server, and define email templates for the License Expired and the License Expiring Soon event types. This ensures you will be notified of an approaching expiration date. For more information, see Enabling email notifications.

To enter licensing information when you first log in

The first time you log in as the Appliance Administrator, you are prompted to add one or more licenses. The Success dialog displays when a license is added.

On the virtual appliance, the license is added as part of Initial Setup. For more information, see Setting up the virtual appliance.

To add new licenses from Settings

1. Navigate to Administrative Tools | Settings | Appliance | Licensing.
2. Click .

3. Browse to select the license file.

   Once you add a license, you will see the current license information and a link that allows you to update the license.

4. To add another module license, click Add License and complete the information.

To update a module license

1. Navigate to Administrative Tools | Settings | Appliance | Licensing.
2. Select Update License in the lower left corner of a module's licensing information pane.

3. Browse to select the license file. Select Open.

Lights Out Management (BMC)

The Lights Out Management feature allows you to remotely manage the power state and serial console to Safeguard for Privileged Passwords using the baseboard management controller (BMC). When a LAN interface is configured, this enables the Appliance Administrator to power on an appliance remotely or to interact with the recovery kiosk.

It is the responsibility of the Appliance Administrator to enable and configure the Lights Out Management feature. When Lights Out Management is enabled, the Appliance Administrator can set or change the password and modify the network information for the baseboard management console (BMC). When disabled, Safeguard for Privileged Passwords immediately resets the password to a random value and resets the network settings to default values.

To enable Lights Out Management

1. Access Lights Out Management in one of two ways:
   • Navigate to Administrative Tools | Settings | Appliance | Lights Out Management (BMC).
   • Use the virtual appliance Support Kiosk, Lights Out Managment (BMC). For more information, see Support kiosk.
2. Click the Enable Lights Out Management toggle to enable or disable this feature ( toggle on or toggle off).
3. Once enabled, enter the following information about the BMC:
   1. IP address: The IPv4 address of the host machine.
   2. Netmask: The network mask IPv4 address.
   3. Default Gateway: The default gateway IPv4 address.

4. Click the Set BMC Admin Password button to set the password for the host machine.

   Maximum password length: 20 characters.

   NOTE: If this feature was previously enabled, you will see an Update BMC Admin Password button instead. Optionally, click the Update BMC Admin Password button to reset the password for the host machine.

5. Click OK to save the settings on the host machine.

Network Diagnostics

Safeguard for Privileged Passwords makes these diagnostic tests available for the Appliance Administrator and Operations Administrator.

Navigate to Administrative Tools | Settings | Appliance |Network Diagnostics.