Chat now with support
Chat with Support

Safeguard for Privileged Passwords On Demand Hosted - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Activity Center Search box Privileged access requests Toolbox Accounts Account Groups Assets
General/Properties tab (asset) Accounts tab (asset) Account Dependencies tab (asset) Owners tab (asset) Access Request Policies tab (asset) Asset Groups tab (asset) Discovered SSH Keys (asset) Discovered Services tab (asset) History tab (asset) Managing assets
Asset Groups Discovery Entitlements Linked Accounts Partitions Profiles Settings
Access Request settings Appliance settings Asset Management settings Tags Backup and Retention settings Certificates settings Cluster settings Enable or Disable Services settings External Integration settings Password Management settings Real-Time Reports Safeguard Access settings SSH Key Management settings Security Policy Settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions About us

Discovered SSH Keys (asset)

The Discovered SSH Keys tab displays the discovered SSH keys for all the accounts of this asset.

To access Discovered SSH Keys:

  • desktop client: Navigate to Administrative Tools | Assets | Discovered SSH Keys.
  • web client: Navigate to Asset Management | Assets | (Edit) | Discovered SSH Keys.
Table 61: Assets: Discovered SSH Keys tab properties
Property Description

Fingerprint

The fingerprint of the SSH key used for authentication.

( web client only) Account Status

The status of the Safeguard account.

SSH Key Managed

This column will have a check mark indicating the SSH key currently in use on the account.

Comment

Free form comment.

Key Type

SSH key identity type such as RSA or DSA. For more information, see SSH Key Management settings.

Key Length

The supported RSA or DSA key length displays.

Asset Name

Name of the asset associated with the account.

Account

The name of the account where the SSH key was discovered.

Date/Time Discovered

The date and time when the SSH key was discovered.

Use these buttons on the details toolbar.

Table 62: Assets: Discovered SSH Keys tab toolbar
Option Description

Revoke

Use this button to revoke access for unmanaged SSH keys.

Refresh

Update the list of dependent assets assigned to the selected account.

Search

To locate a specific dependent asset in this list, enter the character string to be used to search for a match. For more information, see Search box.

Discovered Services tab (asset)

The Discovered Services tab displays information specific to the selected asset and is applicable only to Windows assets.

To access Discovered Services:

Use these buttons to manage the discovered services.

Table 63: Discovered Services: Toolbar
Option Description
Discover Services

Run the selected service discovery job.

Refresh

Update the list of service discovery jobs.

Search

To locate one or more assets, enter the character string to be used to search for a match. For more information, see Search box.

The following displays for each discovered service.

Table 64: Assets: Discovered Services tab properties
Property Description

Account

The account in Safeguard that maps to the discovered account associated with the discovered service or task on the asset. This can be a local account or an Active Directory account.

Domain Name

The domain name of the account if the account is an
Active Directory account.

System Name

The asset to which the account is associated.

Account Status

The status of the Safeguard account.

Dependent Account

A check displays if the account is associated as an account dependency on the asset. The value is blank if the account is not associated as an account dependency of the asset.

Service Type

Type of service discovered. Values may be Service or Task.

Service Name

The name of the discovered service or task.

Service Enabled

A check displays if the service or task on the asset is enabled. If there is no check mark, the service or task is disabled.

Discovered Account

The discovered service account name configured.

Date/Time Discovered

The date and time when the service or task was discovered.

History tab (asset)

The History tab allows you to view or export the details of each operation that has affected the selected asset.

To access History:

  • desktop client: Navigate to Administrative Tools | Assets | History.

    The top of the History tab contains the following information:

    • Items: Total number of entries in the history log.
    • Refresh: Update the list displayed.
    • Export: Export the data to a .csv file.
    • Search: For more information, see Search box.

    • Time Frame: By default, the history details are displayed for the last 24 hours. Click one of the time intervals at the top of the grid to display history details for a different time frame. If the display does not refresh after selecting a different time interval, click Refresh.
  • web client: Navigate to Asset Management | Assets | (Edit) | History.

    The top of the History tab contains the following information:

    • Date Range: By default, the history details are displayed for the last 24 hours. From the drop-down, select one of the time intervals to display history details for that time frame.

    • Refresh: Update the list displayed.

    • Search: For more information, see Search box.

Table 65: Assets History tab properties
Property Description

Date/Time

The date and time of the event.

User

The display name of the user that triggered the event.

Source IP

The network DNS name or IP address of the managed system that triggered the event.

Object Name

The name of the selected asset.

Event

The type of operation made to the selected asset:

  • Create
  • Delete
  • Update
  • Add Membership
  • Remove Membership

NOTE: A membership operation indicates a relationship change with a related or parent object such as an account dependency was added or deleted from the selected asset.

Related Object

The name of the related object.

Related Object Type

The type of the related object.

Parent

The name of the object to which the selected asset is a child.

Parent Object Type

The parent object type.

Managing assets

Use the controls and tabbed pages on the Assets page to perform the following tasks to manage Safeguard for Privileged Passwords assets:

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating