立即与支持人员聊天
与支持团队交流

One Identity Safeguard for Privileged Passwords 7.4 - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Home page Privileged access requests Appliance Management
Appliance Backup and Retention Certificates Cluster Global Services External Integration Real-Time Reports Safeguard Access Appliance Management Settings
Asset Management
Account Automation Accounts Assets Partitions Discovery Profiles Tags Registered Connectors Custom platforms Importing objects
Security Policy Management
Access Request Activity Account Groups Application to Application Cloud Assistant Asset Groups Entitlements Linked Accounts User Groups Security Policy Settings
User Management Reports Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP and SPS join guidance Appendix C: Regular Expressions

Preparing VMware ESXi hosts

SPP supports VMware ESXi hosts.

IMPORTANT: SPP can only manage local users on a VMware host.

To prepare a VMware ESXi host for SPP

  1. Use an existing account or create a new account as the service account on the asset and assign it a password.

    The default administrator account is suitable.

  2. Grant the service account the privileges required to set user passwords using the web management API.
  3. When adding a VMware ESXi host to SPP:
    1. Specify the network address.
    2. Specify port 443 as the HTTPS port.

Preparing Fortinet FortiOS devices

SPP supports Fortinet Internet appliances. SPP uses the SSH protocol to connect to Fortinet devices.

To prepare a Fortinet FortiOS device for SPP

  1. Create the service account as a local user on the managed system and assign it a password.

  2. Add the service account to the Fortinet Administrators group. This allows the service account to access the device with SSH to manage users.

    IMPORTANT: SPP can only manage passwords for users that are members of the Fortinet Administrators group.

  3. Enable and configure the SSH server to allow the service account to log in remotely.
  4. Add the Fortinet device to SPP using password authentication.

Preparing F5 Big-IP devices

SPPsupports F5 Big-IP devices. SPP uses the SSH protocol to connect to F5 Big-IP devices.

To prepare an F5 Big-IP device for SPP

  1. Create the service account as a local user on the F5 Big-IP managed system and assign it a password. Assign that service account the Administrator Role on all partitions. This allows the service account to manage users.
  2. Enable console access by setting Terminal Access to either Advanced or tmsh, which will allow the service account to log in remotely via SSH.
  3. Add the F5 Big-IP device to SPP using password or SSH key authentication.

Preparing HP iLO servers

In SPP, the HP iLO operating system is an HP Integrated Lights-Out (iLO) HP Proliant server. SPP connects to HP iLO systems using SSH. Password check and change is supported.

To prepare an HP iLO server for SPP

  1. Create a service account with the Administrate User Accounts privilege and assign it a password.

    The service account must have login privileges and must be able to configure users.

  2. Verify that SSH is enabled.
  3. In SPP, create the asset and accounts for the HP iLO server using password authentication. Accounts can also be discovered.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级