Chat now with support
Chat with Support

One Identity Safeguard for Privileged Passwords 2.4 - Administration Guide

Introduction System requirements Installing the One Identity Safeguard for Privileged Passwords desktop client Setting up Safeguard for Privileged Passwords for the first time Getting acquainted with the console Privileged access requests Toolbox Accounts Account Groups Assets Asset Groups Directories Entitlements Partitions Settings
Access Request settings Appliance settings Asset Management settings Backup and Retention settings Certificate settings Cluster settings External Integration settings Messaging settings Profile settings Access settings Sessions settings
Users User Groups Disaster recovery Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions
How do I access the API How do I audit transaction activity How do I configure external federation authentication How do I manage accounts on unsupported platforms How do I modify the appliance configuration settings How do I prevent Safeguard for Privileged Passwords messages when making RDP connections How do I see which assets and/or accounts are governed by a profile How do I set the appliance system time How do I setup discovery jobs How do Safeguard for Privileged Passwords database servers use SSL What are the access request states What do I do when an appliance goes into quarantine What is required for One Identity Safeguard for Privileged Passwords Privileged Sessions What is required to integrate with Starling Identity Analytics & Risk Intelligence What needs to be set up to use Application to Application What role-based email notifications are generated by default When does the rules engine run for dynamic grouping and tagging Why did the password change during an open request Why join Safeguard for Privileged Passwords to One Identity Starling
Safeguard Desktop Player Appendix: Safeguard ports

Updates

It is the responsibility of the Appliance Administrator to update or upgrade One Identity Safeguard for Privileged Passwords by installing an update file to modify the software or configuration of the running appliance.

Download the latest update from: https://support.oneidentity.com/one-identity-safeguard/.

NOTE: Clustered environment: Apply the patch so all appliances in the cluster are on the same version. The procedure for patching cluster members depends on the Safeguard for Privileged Passwords version you are currently running.

  • If you are running Safeguard for Privileged Passwords 2.0.1.x or earlier, you must unjoin replica appliances, install the patch on each appliance, and then enroll the replica appliances to rebuild your cluster. For more information, see Patching cluster members in the One Identity Safeguard for Privileged Passwords 2.0 Administration Guide.
  • If you are running Safeguard for Privileged Passwords 2.1.x or 2.2.x, you can use the enhanced cluster patching feature where unjoining replica appliances is no longer required. For more information, see Patching cluster members.

Important: Always back up your system before you install an update file. For more information, see Backup and Restore.

To install an update file

  1. Navigate to Administrative Tools | Settings | Appliance | Updates.

    The current appliance and client versions are displayed.

  2. Click (or tap) Upload a File and browse to select an update file.

    Note: When you select a file, Safeguard for Privileged Passwords uploads it to the server, but does not install it.

  3. Once the file has successfully uploaded, click (or tap) one of the following:
    • Install Now to install the update file.

      Note: Once you install an update file, you cannot uninstall it.

    • Remove to delete the file from the server without installing it.

    The Updates pane shows the upgrade progress and when the appliance has been successfully upgraded.

Asset Management settings

Use the Asset Management settings to configure the schedule and settings used by discovery jobs that find privileged accounts or systems on your network, and to define and manage dynamic tags.

Navigate to Administrative Tools | Settings | Asset Management.

Table 149: Asset Management settings
Setting Description

Account Discovery

Where you configure the rules Safeguard for Privileged Passwords uses to perform asset account discovery.

NOTE: The rules configured here only apply to asset accounts. For more information on configuring discovery rules for directory accounts, see Managing directory account discovery jobs.

Custom Platforms

Where you add a custom platform.

Directory Tags

Where you view and manage dynamic tags for directory accounts.

Tags

Where you view and manage dynamic tags for assets and asset accounts.

Account Discovery

Account Discovery settings are the rules Safeguard for Privileged Passwords uses to perform account discovery against the assets that are in the scope of a partition profile.

There are two ways to configure and schedule account discovery jobs. You can set up discovery rules in Settings | Asset Management | Account Discovery and then add them to a profile or you can add a new discovery setting as you create a new profile.

You can configure the setting to automatically add all the discovered accounts to Safeguard for Privileged Passwords for management, or you can configure the setting to allow you to manually include the discovered accounts.

Navigate to Administrative Tools | Settings | Asset Management | Account Discovery. The Account Discovery pane displays the following about the listed account discovery settings.

Table 150: Account Discovery Settings: Properties
Property Description
Name

The name of the account discovery setting.

Partition

The partition on which Safeguard for Privileged Passwords runs the selected account discovery setting.

Description

Information about the selected account discovery setting.

Schedule

Displays the selected account discovery setting's schedule.

Use these toolbar buttons to manage the account discovery settings.

Table 151: Account Discovery Settings: Toolbar
Option Description
Add Account Discovery Setting

Add an account discovery setting. For more information, see Adding an asset account discovery setting.

Delete Selected

Remove the selected account discovery setting.

Refresh

Update the list of account discovery settings.

Edit

Modify the selected account discovery setting.

Copy

Clone the selected account discovery setting.

Related Topics

Account discovery job workflow

Creating a partition profile

Adding an asset account discovery setting

It is the responsibility of the Asset Administrator or the partition's delegated administrator to configure the rules that govern how Safeguard for Privileged Passwords performs account discovery. For more information, see Account discovery job workflow.

Note:

Safeguard for Privileged Passwords supports account discovery on the following platforms:

  • AIX
  • HP-UX
  • Linux
  • MAC OS X
  • Solaris
  • Windows

To add an asset account discovery setting

  1. Navigate to Administrative Tools | Settings | Asset Management | Account Discovery.
  2. Click (or tap)  Add Account Discovery Setting to open the Account Discovery Settings dialog.
  3. In the Account Discovery Settings dialog, provide the following:
    1. Partition: Browse to select a partition.
    2. Name: Enter a name for the account discovery setting.

      Limit: 50 characters

      Required

    3. Description: Enter descriptive text about the account discovery setting.

      Limit: 255 characters

    4. Schedule: Click (or tap) the Schedule button and choose an interval.

      In the Schedule dialog,

      • Interval: Choose Never, Minute, Hour, Day, Week, or Month.

        NOTE: Best Practice: Do not use the Minute interval.

      • Time of day: Set the start time.
      • Repeat interval: Select the interval you would like to repeat the account discovery task.
        • If Weekly, select which days of the week you want to repeat the account discovery task.
        • If Monthly, set the task recurrence pattern: Day of month or week of month and day of week.
      • Time Zone: Select the time zone.
    5. Find all accounts: Select this option to discover all accounts assigned to the assets in the selected partition.
    6. Find accounts based on rules: Select this option to discover only accounts that match a discovery rule's criteria. When you select this option Safeguard for Privileged Passwords displays a list of discovery rules configured for this partition and allows you to add a new rule. For more information, see Adding an asset account discovery rule.
    7. Automatically Manage Found Accounts: Select this check box to automatically add the discovered accounts to Safeguard for Privileged Passwords.
Related Documents