立即与支持人员聊天
与支持团队交流

Safeguard for Privileged Passwords On Demand Hosted - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Activity Center Search box Privileged access requests Toolbox Accounts Account Groups Assets
General/Properties tab (asset) Accounts tab (asset) Account Dependencies tab (asset) Owners tab (asset) Access Request Policies tab (asset) Asset Groups tab (asset) Discovered SSH Keys (asset) Discovered Services tab (asset) History tab (asset) Managing assets
Asset Groups Discovery Entitlements Linked Accounts Partitions Profiles Settings
Access Request settings Appliance settings Asset Management settings Tags Backup and Retention settings Certificates settings Cluster settings Enable or Disable Services settings External Integration settings Password Management settings Real-Time Reports Safeguard Access settings SSH Key Management settings Security Policy Settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions About us

Preparing Fortinet FortiOS devices

Safeguard for Privileged Passwordssupports Fortinet Internet appliances. Safeguard for Privileged Passwords uses the SSH protocol to connect to Fortinet devices.

To prepare a Fortinet FortiOS device for Safeguard for Privileged Passwords

  1. Create the service account as a local user on the managed system and assign it a password.

  2. Add the service account to the Fortinet Administrators group. This allows the service account to access the device with SSH to manage users.

    IMPORTANT: Safeguard for Privileged Passwords can only manage passwords for users that are members of the Fortinet Administrators group.

  3. Enable and configure the SSH server to allow the service account to log in remotely.
  4. Add the Fortinet device to Safeguard for Privileged Passwords using password authentication.

Preparing F5 Big-IP devices

Safeguard for Privileged Passwordssupports F5 Big-IP devices. Safeguard for Privileged Passwords uses the SSH protocol to connect to F5 Big-IP devices.

To prepare an F5 Big-IP device for Safeguard for Privileged Passwords

  1. Create the service account as a local user on the F5 Big-IP managed system and assign it a password. Assign that service account the Administrator Role on all partitions. This allows the service account to manage users.
  2. Enable console access by setting Terminal Access to either Advanced or tmsh, which will allow the service account to log in remotely via SSH.
  3. Add the F5 Big-IP device to Safeguard for Privileged Passwords using password or SSH key authentication.

Preparing HP iLO servers

In Safeguard for Privileged Passwords, the HP iLO operating system is an HP Integrated Lights-Out (iLO) HP Proliant server. Safeguard for Privileged Passwords connects to HP iLO systems using SSH. Password check and change is supported. Account discovery is not supported.

To prepare an HP iLO server for Safeguard for Privileged Passwords

  1. Create a service account with the Administrate User Accounts privilege and assign it a password.

    The service account must have login privileges and must be able to configure users.

  2. Verify that SSH is enabled.
  3. In Safeguard for Privileged Passwords, create the asset and accounts for the HP iLO server using password authentication.

Preparing HP iLO MP (Management Processors)

In Safeguard for Privileged Passwords the HP iLO MP operating system is an HP Integrity Integrated Lights-Out (iLO) Management Processor. Safeguard for Privileged Passwords connects to HP iLO MP systems using SSH.

To prepare an HP iLO Management Processor for Safeguard for Privileged Passwords

  1. Create a service account with the Administer User Accounts privilege and assign it a password.
  2. Verify that SSH is enabled.
  3. In Safeguard for Privileged Passwords, create the asset and accounts for the HP iLO MP asset type using password authentication.
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级