One Identity Safeguard for Privileged Sessions 6.10.0 - Administration Guide

This section provides information on:

• How to unlock your audit keystore

• How to reset your audit keystore if you forgot your master password

In the audit keystore, the master password protects your private keys from unauthorized use, for example, if you share a computer with anyone.

To use the private keys that are stored in your audit keystore to decrypt audit items, you must unlock your audit keystore by providing your master password. After providing your master password, your audit keystore remains unlocked for the duration of your session, or until you click Lock keystore on User menu > Audit keystore.

To unlock your audit keystore

1. Navigate to User menu > Audit keystore.

2. Click Unlock private keystore.

   The Unlock keystore dialog is displayed.

   Figure 47: User Menu > Audit keystore > Unlock private keystore — Enter the master password

   

   Enter your master password and click Unlock keystore.

   The audit keystore is unlocked.

   You can add new keys or manage your uploaded private keys.

Resetting your audit keystore

To reset your audit keystore if you forgot your master password

1. Navigate to User menu > Audit keystore.

2. If you forgot your master password, click Forget password?.

3. In the Forget password? dialog, click Reset keystore.

4. Click Add new key and the Create master password dialog is displayed, where you can add a new master password.

5. Upload the necessary private keys again to your audit keystore.

Result

The audit keystore is unlocked and it remains open for the duration of your session or until you click Lock keystore.

This section provides information on how to delete a key in your audit keystore.

To delete a key from your audit keystore

1. Navigate to User menu > Audit keystore.

2. Click Unlock private keystore.

   The Unlock keystore dialog is displayed.

   Figure 48: User Menu > Audit keystore > Unlock private keystore — Enter the master password

   

   Enter your master password and click Unlock keystore.

   The audit keystore is unlocked.

3. Click next to the private key that you want to delete.

   NOTE: If you delete the last private key from your audit keystore, the audit keystore is reset and next time you add a private key to your audit keystore, you must define a master password again.

Result

The private key is deleted from your audit keystore.

Interfaces

Figure 49: Basic Settings > Network > Interfaces

Lists all of the logical interfaces (VLAN IDs, IP addresses, netmasks, and names) assigned to the three physical interfaces of SPS. For more information on managing logical interfaces, see Managing logical interfaces.

In addition, it is also possible to set the Maximum Transmission Unit (MTU) for each network interface (VLAN or network interface card) individually. The default value is 1500.

Speed is displayed for every physical interface. To explicitly set the speed of the interface, select the new value from the Speed field. Modifying the speed of an interface is recommended only for advanced users.

You can add interface-specific network routes using the Advanced routing option of each interface. Otherwise, use the Routing table option to manage networking routes.

Routing table

Figure 50: Basic Settings > Network > Routing table

When sending a packet to a remote network, SPS consults the routing table to determine the path it should be sent. If there is no information in the routing table then the packet is sent to the default gateway. Use the routing table to define static routes to specific hosts or networks. You have to use the routing table if SPS interfaces are connected to multiple subnets.

Click the and icons to add new routes or delete existing ones. A route means that messages sent to the Address/Netmask network should be delivered to Gateway.

For detailed examples, see Configuring the routing table.

IP forwarding

Figure 51: Basic Settings > Network > IP forwarding

You can enable routing between logical interfaces, which allows you to direct uncontrolled traffic through SPS. For more information, see Routing uncontrolled traffic between logical interfaces.

To mimic the functionality of the deprecated Router mode, configure a logical interface for each physical interface you want to connect, and enable IP forwarding between them.

Naming

Figure 52: Basic Settings > Network > Naming

• Hostname: Name of the machine running SPS.

• Nick name: The nickname of SPS. Use it to distinguish the devices. It is displayed in the core and boot login shells.

• DNS search domain: Name of the domain used on the network. When resolving the domain names of the audited connections, SPS will use this domain to resolve the target hostname if the appended domain entry of a target address is empty.

• Primary DNS server: IP address of the name server used for domain name resolution.

• Secondary DNS server: IP address of the name server used for domain name resolution if the primary server is unaccessible.

HTTPS proxy

The HTTPS proxy settings must be configured if your company policies do not allow devices to connect directly to the web. Once configured, SPS uses the configured proxy server for outbound web requests to external integrated services, such as Join to Starling or SPS plugins.

Figure 53: Basic Settings > Network > HTTPS proxy

• Proxy server: The IP address or DNS name of the proxy server.

• Port: The IP address or DNS name of the proxy server.

  NOTE:

  If different ports are specified in the Proxy server and the Port field, the Port field takes precedence.

• Username: The user name used to connect to the proxy server.

  NOTE:

  The username and password are only required if your proxy server requires them to be specified.

• Password: The password required to connect to the proxy server.

  NOTE:

  The username and password are only required if your proxy server requires them to be specified.