Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 7.0.4.1 LTS - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Home Privileged access requests Appliance Management
Appliance Backup and Retention Certificates Cluster Enable or Disable Services External Integration Real-Time Reports Safeguard Access Appliance Management Settings
Asset Management
Account Automation Accounts Assets Partitions Discovery Profiles Tags Registered Connectors Custom platforms
Security Policy Management
Access Request Activity Account Groups Application to Application Cloud Assistant Asset Groups Entitlements Linked Accounts User Groups Security Policy Settings
User Management Reports Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP and SPS join guidance Appendix C: Regular Expressions About us

Power options

Use the power options in the Recovery Kiosk to remotely restart or shut down the physical appliance or AWS or Azure virtual deployment.

  • You can use the Reboot option in the Recovery Kiosk to restart the appliance. Reboot from the Recovery Kiosk if you cannot access the Safeguard for Privileged Passwords web client or API to restart the appliance using the normal procedures. Reboot the AWS or Azure virtual deployment.
  • You must use the Shut Down option in the Recovery Kiosk to shutdown the physical appliance or AWS or Azure virtual deployment.

Rebooting the appliance

Restarting the appliance from the Recovery Kiosk is available.

If you cannot access the Safeguard for Privileged Passwords web client or API to restart the appliance using the normal procedures, you can restart the appliance or Azure VM from the Recovery Kiosk.

To reboot the appliance

  1. From the Recovery Kiosk, select the Power Options > Reboot option.
  2. Press the right arrow.
  3. When prompted, select Yes to start the reboot or No to return to the main option screen.

Shutting down the appliance

Shutting down the appliance from the Recovery Kiosk is available. You must use the Recovery Kiosk to manually shutdown the Safeguard for Privileged Passwords Appliance. You can also shut down the Azure virtual machine deployment.

To shut down the appliance

  1. From the Recovery Kiosk, select the Power Options > Shut Down option.
  2. Press the right arrow.
  3. When prompted, select Yes to shut down the appliance or No to return to the main option screen.

Admin password reset

If your Bootstrap Administrator's password is locked out when using the hardware appliance or AWS or Azure virtual deployment, you can reset it to the initial password.

NOTE: If a user has not logged onto Safeguard for Privileged Passwords for a set number of days, Safeguard for Privileged Passwords disables the user account. This is set using the Deactivate After setting in Appliance Management > Safeguard Access > Local Login Control.

To reset the Bootstrap Administrator's password

  1. Connect to the recovery Kiosk, either physically via serial cable or via the IPMI network interface.

  2. From the Recovery Kiosk, select the Admin Password Reset option.
  3. Press the right arrow.
  4. At id, enter your identification and press the Tab key (or down arrow).
  5. At Get Challenge, press the Enter key.

    Safeguard for Privileged Passwords produces a challenge.

  6. Copy and paste the challenge into a text document and send it to One Identity Support.

    • A challenge response is only good for 48 hours.

    • Do not navigate away from the page or refresh during a challenge response operation. Doing so will invalidate the challenge response. Do not disconnect the serial cable.

  7. When you get the response from One Identity Support, copy and paste the response into the kiosk screen and select Reset Password. The response is only valid for 24 hours from when it was generated by One Identity.

  8. Once the operation has completed, the password for the admin account is defaulted back to Admin123

NOTE: Best practice: To keep your appliance secure, change the default password for the Bootstrap Administrator’s account.

See the following Knowledge Base Article for more information, including using the MGMT port to reset the admin password: KB 279291: How to reset the Admin password.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating