CAUTION: To maximize security, restrict the access to MGMT interface to as few users as possible. The Management web kiosk gives access to functions without authentication, such as pulling a support bundle or rebooting the appliance.

Follow these steps to set up and configure the One Identity Safeguard for Privileged Passwords 3000 Appliance or 2000 Appliance.

Step 1: Before you start

Ensure that you install the Microsoft .NET Framework 4.6 (or later) on your management host.

Step 2: Prepare for installation

Gather the following items before you start the appliance installation process:

• Laptop
• IP address
• IP subnet mask
• IP gateway
• DNS server address
• NTP server address

• One Identity Safeguard for Privileged Passwords license
  

  If you purchased One Identity Safeguard for Privileged Passwords, the appropriate license files should have been sent to you via email. If you have not received an email or need it to be resent, visit https://support.oneidentity.com/contact-us/licensing. If you need to request a trial key, please send a request to sales@oneidentity.com or call +1-800-306-9329.

Step 3: Rack the appliance

Prior to installing the racks for housing the appliance, see Warnings and precautions

Step 4: Power on the appliance

Prior to powering up the appliance, see Standardized warning statements for AC systems

The One Identity Safeguard for Privileged Passwords Appliance includes dual power supplies for redundant AC power and added reliability.

1. Plug the power cords to the power supply sockets on the appliance back and then connect the cords to AC outlets.

   TIP:As a best practice, connect the two power cords to outlets on different circuits. One Identity recommends using an UPS on all appliances.

2. Press the Green check mark button on the front panel of the appliance for NO MORE THAN one second to power on the appliance.

   Caution: Once the Safeguard for Privileged Passwords Appliance is booted, DO NOT press and hold the Green check mark button. Holding this button for four or more seconds will cold reset the power of the appliance and may result in damage.

   You can use the Red X button to shut down the appliance. Once the Safeguard for Privileged Passwords Appliance is booted, press and hold the Red X button for four seconds until it displays POWER OFF.

   NOTE: If the Safeguard for Privileged Passwords Appliance is not yet booted, it may be necessary to press the Red X button for up to 13 seconds.

   Caution: Once the Safeguard for Privileged Passwords Appliance is booted, DO NOT press and hold the Red X button for more than 13 seconds. This will hard power off the appliance and may result in damage.

Step 5: Connect the management host to the appliance

The port used for a secure first-time configuration of the appliance is MGMT. This IP address is a fixed address that cannot be changed. It will always be available in case the primary interface becomes unavailable. The MGMT IP address is: 192.168.1.105.

The primary interface that connects your appliance to the network is X0. You must change the primary interface IP to match your network configuration. The default X0 IP is: 192.168.0.105.

The appliance can take up to five minutes to boot up. In addition, ping replies have been disabled on the appliance, so you will not be able to ping this secure appliance.

1. Connect an Ethernet cable from the laptop to the MGMT port on the back of the appliance.

2. Set the IP address of the laptop to 192.168.1.100, the subnet mask to 255.255.255.0, and no default gateway.

Step 6: Log in to Safeguard for Privileged Passwords

1. Open a browser on the laptop and connect to the IP address of the MGMT port https://192.168.1.105.

   If you have problems accessing the configuration interface, check your browser Security Settings or try using an alternate browser.

2. Accept the certificate and continue. This is only safe when using an Ethernet cable connected directly to the appliance.

3. Log in to the Safeguard for Privileged Passwords web client using the Bootstrap Administrator account:
   • User name: admin

   • Password: Admin123

4. The Bootstrap Administrator is a built-in account that allows you to get the appliance set up for first-time use. To keep your Safeguard for Privileged Passwords Appliance secure, change the default password for the Bootstrap Administrator’s account.

   • To change the password from the web client, click Settings in the upper-right corner of the screen and select Change Password.

   • If this password is ever lost, you can reset it to the default of Admin123. See the Safeguard for Privileged Passwords Administration Guide, Admin password reset topic.

5. Configure the primary network interface (X0):
   1. On the Appliance Configuration page, configure the following. Click the  Edit icon to modify these settings.
      

      • Time: Enable NTP and set the primary NTP server; if desired, set the secondary NTP server, as well. Click Save. By default, the NTP server is set to pool.ntp.org.

      • Network (X0):
        • Enter the appliance's IPv4 and/or IPv6 address information (IP address, Subnet Mask, Gateway)

        • Enter the DNS server address.

        • Optional, enter the DNS suffixes.

        • Click Save.

Step 7: Connect the appliance to the network

• Connect an Ethernet cable from your primary interface (X0) on the appliance to your network.