Cannot delete account
If you are unable to delete an account, review the considerations below.
Wrong account name:
As an Asset Administrator, you may receive this error if you attempt to delete an account : This entity has access requests which have not yet expired or have to be reviewed. It cannot be deleted now. This error could indicate that Safeguard for Privileged Passwords is trying to change the password or SSH key on an account that does not exist on the asset.
One reason for this error message is that the wrong account name was used when adding the account to Safeguard. So now when someone requests the password or SSH key for this account, Safeguard displays the password or SSH key that was manually set. However, when the requester attempts to log in to the asset using the bad account and password or SSH key, it will fail. If the access request policy specified Change password after check-in, the above error message appears when the administrator tries to delete the account from Safeguard for Privileged Passwords.
Workaround: To delete the account with the misspelled name, first manually set the password or SSH key on the account. Once the account password is reset, Safeguard for Privileged Passwords will allow you to delete the account.
For more information, see:
Cannot play session message
If you receive a message that says Cannot play session... The specified executable is not a valid application for this OS platform, you are most likely attempting to run the Desktop Player on a 32-bit platform, which is not supported.
Domain user denied access to Safeguard for Privileged Passwords
If you add a directory user who has the User must change password at next logon option enabled in Active Directory, Safeguard for Privileged Passwords prevents that user from logging in. There are two ways to allow the directory user to log in to Safeguard for Privileged Passwords successfully:
- Have the directory user use their domain account to log in to an asset joined to Active Directory. When prompted they can change their password. This fulfills the User must change password at next logon requirement.
-OR-
- Have the domain administrator disable the option in Active Directory for the directory user.
LCD status messages
The Safeguard for Privileged Passwords Appliance has an LCD screen that displays the status of the appliance as it is starting and as it progress through certain operations.
As it proceeds through its various stages, it displays the following LCD status messages. First boot setup refers to the initial configuration of Safeguard for Privileged Passwords, which normally happens at the factory when the appliance is deployed and after a factory reset.
- Apply Update xx%: Shows the percentage completed as the appliance progresses through an update operation.
- Factory Reset xx%: Shows the percentage completed as the appliance progresses through a factory reset.
- First boot ... <version>: Displays after the first boot completes while it is waiting for Safeguard for Privileged Passwords to load.
- First Boot Setup xx%: Shows the percentage completed as the appliance is being configured for the first time.
- Preparing for first boot setup: Displays after a factory reset and before the appliance starts configured for the first time.
- Quarantine: Indicates the appliance in a Quarantine state. For more information, see What do I do when an appliance goes into quarantine.
- Starting core: Indicates that Safeguard for Privileged Passwords is being loaded.
- Starting database: Indicates that the Safeguard for Privileged Passwords database is being loaded.
- Starting reboot: Indicates the appliance is being rebooted.
- Starting services: Indicates that Safeguard for Privileged Passwords services are being loaded.
- Starting shut down: Indicates the appliance is being shut down.
- Starting web: Indicates that the web services are being loaded.
When the appliance is running, the LCD home screen displays: Safeguard for Privileged Passwords <version number>.
