Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 6.10 - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Search box Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Discovery Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificates settings Cluster settings Enable or Disable Services settings External Integration settings Messaging settings (desktop client) Password Management settings Real-Time Reports Safeguard Access settings SSH Key Management settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions About us

Password or SSH key profile did not run

The password and SSH key management settings Settings | Access Request | Enable or Disable Services enable the automatic profile check and change schedules in partitions.

Ensure the password and SSH key management settings are enable for profiles to run on schedule:

  • Check Password Management Enabled
  • Change Password Management Enabled
  • Check SSH Key Management Enabled
  • Change SSH Key Management Enabled

For more information, see Enable or disable access request and services.

Recovery Kiosk (Serial Kiosk)

Safeguard for Privileged Passwords provides a Recovery Kiosk (Serial Kiosk) with the following options.

  • Support bundle: Allows you to generate and send a support bundle to a Windows share.

To start the Recovery Kiosk

On the terminal or laptop running the Recovery Kiosk, you must configure your serial port settings as follows:

  1. Connect a serial cable from a laptop or terminal to the serial port on the back of the appliance marked with |0|0|.
  2. On the laptop or terminal, configure the serial port settings as follows:

    • Speed: 115200
    • Data bits: 8
    • Parity: None
    • Stop bit: 1
  3. These options display on the Recovery Kiosk screen:

    • Appliance Information
    • Power Options

      • Reboot
      • Shut Down
    • Admin Password Reset
    • Factory Reset (Not available for virtual appliances.)
    • Support Bundle
  4. Use the up-arrow and down-arrow to select one of these options.
  5. Use the right-arrow to initiate the option.
  6. Use the left-arrow to return to the option.
Kiosk keyboard shortcuts

Safeguard for Privileged Passwords provides these keyboard shortcuts. If you make the window too small to accommodate the kiosk elements, Safeguard for Privileged Passwords tells you how to readjust the window size.

  • Ctrl + D: Resets the kiosk to its original state. Clears challenges and options.

    Caution: When resetting the Bootstrap Administrator's password or performing a factory reset, if you reset the kiosk before you receive the response from One Identity Support, you must submit a new challenge.

  • Ctrl + R: Redraws the kiosk to fit a resized window. If you resize the window, press Ctrl + R to reorganize the kiosk elements to fit properly into the newly-sized window.

Appliance information (Recovery Kiosk)

Use the Appliance Information option on the Recovery Kiosk to view basic appliance information and edit the IP addresses.

If you are using Azure, configure the SPP VM with a static IP address in Azure. If you need to change the IP address of the Safeguard appliance, or if it changes due to dynamic configuration in Azure, and the appliance is part of a cluster, the appliance will automatically reset to Standalone Read-only mode on the next boot (effectively leaving the cluster). The Administrator can join the appliance back to the cluster.

To view or edit the appliance information

  1. From the Recovery Kiosk, select the Appliance Information option.
  2. Right-arrow to see:

    • Appliance State: The appliance's current state.
    • Uptime: The amount of time (hours and minutes) the appliance has been running.
    • MGMT (not used Azure): The management host's network interface properties, including the MAC address and IPv4 (and optionally IPv6) properties.
    • X0: The network interface properties for the primary interface that connects your appliance to the network, including the MAC address and IPv4 (and optionally IPv6) properties.
  3. To change the network properties for the primary interface (XO), click Edit next to the appropriate heading. Clicking Edit displays the network interface properties which can be modified. If you are using Azure, the IP address cannot be changed.
  4. After editing the network interface properties, click Submit.

    Once the updates are completed, a Network interface update request accepted message is displayed.

Power options

Use the power options in the Recovery Kiosk to remotely restart or shut down the physical appliance or AWS or Azure virtual deployment.

  • You can use the Reboot option in the Recovery Kiosk to restart the appliance. Reboot from the Recovery Kiosk if you cannot access the Safeguard for Privileged PasswordsWindows desktop client, web client, or API to restart the appliance using the normal procedures. Reboot the AWS or Azure virtual deployment.
  • You must use the Shut Down option in the Recovery Kiosk to shutdown the physical appliance or AWS or Azure virtual deployment.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating