立即与支持人员聊天
与支持团队交流

One Identity Safeguard for Privileged Passwords 7.5 - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Home page Privileged access requests Appliance Management
Appliance Backup and Retention Certificates Cluster Global Services External Integration Real-Time Reports Safeguard Access Appliance Management Settings
Asset Management
Account Automation Accounts Assets Partitions Discovery Profiles Tags Registered Connectors Custom platforms Importing objects
Security Policy Management
Access Request Activity Account Groups Application to Application Cloud Assistant Asset Groups Entitlements Linked Accounts User Groups Security Policy Settings
User Management Reports Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP and SPS join guidance Appendix C: Regular Expressions

Support bundle

Prior to using the Support Bundle function, set up a Windows share where the support bundle is to be sent.

To generate a support bundle

  1. From the Recovery Kiosk, select the Support Bundle option.
  2. Press the right arrow.

  3. Select the type of support bundle to be generated:

    • Support Bundle
    • Quarantine Bundle

  4. When prompted, enter the following information:

    • Address: Enter the address of the Windows share (<IP Address>\<ShareName>) where the support bundle is to be saved.
    • User: Enter the user name to be used to access the Windows share.

    • Password: Enter the password associated with the specified user account.

      NOTE: If you set up the Windows share to allow anonymous access, you will not be prompted to enter a user name or password.

  5. Select Copy to Share. When completed, a message appears stating that a support bundle has been sent to the specified share.

Replica not adding

If you receive a persistent message that says, An internal request has timed out... when you attempt to add an appliance to a cluster, ensure that the appliance is at the same version of SPP as the primary. All members of a cluster must be the same.

System services did not update or restart after password or SSH key change

If the system services do not update or restart after an automatic password or SSH key change, first check your audit logs in the Activity Center.

NOTE: You can also check the Support bundle logs.

If the audit logs do not adequately explain the problem, then check the options on the Change password or Change SSH key tab of the profile that governs the service account.

  1. Navigate to Asset Management > Partitions.
  2. Select a partition then click Password Profiles or SSH Key Profiles.
  3. Double-click the selection in the grid.
  4. On the profile dialog, go to the Change Password or Change SSH Key tab.

For service accounts that run system services or scheduled system tasks, verify the options on the profile's Change password tab or Change SSH Key tab that enable or disable automatic service update, or restart. You must update the setting to change these options.

Test Connection failures

The most common causes of failure in SPP are either connectivity issues between the appliance and the managed system, or problems with service accounts.For more information, see Connectivity failures..

Disabling User Account Control (UAC) Admin Approval Mode on a remote host can also resolve Test Connection failures. For more information, see Change password or SSH key fails..

If you have entered values for Specify Domain Controllers and if SPP does not find a domain controller in the list, the test connection fails and an error is returned.

The following topics explain some possible reasons that Test Connection could fail.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级