立即与支持人员聊天
与支持团队交流

Safeguard for Privileged Passwords On Demand Hosted - Administration Guide

Introduction System requirements and versions Using API and PowerShell tools Using the virtual appliance and web management console Cloud deployment considerations Setting up Safeguard for Privileged Passwords for the first time Using the web client Getting started with the desktop client Using the desktop client Activity Center Search box Privileged access requests Toolbox Accounts Account Groups Assets
General/Properties tab (asset) Accounts tab (asset) Account Dependencies tab (asset) Owners tab (asset) Access Request Policies tab (asset) Asset Groups tab (asset) Discovered SSH Keys (asset) Discovered Services tab (asset) History tab (asset) Managing assets
Asset Groups Discovery Entitlements Linked Accounts Partitions Profiles Settings
Access Request settings Appliance settings Asset Management settings Tags Backup and Retention settings Certificates settings Cluster settings Enable or Disable Services settings External Integration settings Password Management settings Real-Time Reports Safeguard Access settings SSH Key Management settings Security Policy Settings
Users User Groups Disaster recovery and clusters Administrator permissions Preparing systems for management Troubleshooting Frequently asked questions Appendix A: Safeguard ports Appendix B: SPP 2.7 or later migration guidance Appendix C: SPP and SPS join guidance Appendix D: Regular Expressions About us

Hardware Security Module Certificates

Safeguard for Privileged Passwords enables an Appliance Administrator to upload both Hardware Security Module client certificates with private keys and Hardware Security Module server certificates for connecting to Thales Network Luna devices.

Hardware Security Module Client Certificates

Go to Hardware Security Module Client Certificates:

  • web client: Navigate to Certificates | Hardware Security Module Certificates | Client Certificates.

To display the following information for the Hardware Security Module client certificate, select a certificate.

Table 188: Client Certificates: Properties
Property Description
Subject

The name of the subject (such as user, program, computer, service, or other entity) assigned to the certificate when it was requested.

Appliances

Lists the name of the appliance to which the certificate is assigned.

Issued By

The name of the certificate authority (CA) that issued the certificate.

Thumbprint

A unique hash value that identifies the certificate.

Invalid Before

A start date and time that must be met before a certificate can be used.

Expiration Date

The date and time when the certificate expires and can no longer be used.

Use these toolbar buttons to manage Hardware Security Module client certificates.

Table 189: Client Certificates: Toolbar
Option Description

Add Certificate

Upload a Hardware Security Module client certificate. For more information, see Installing a Hardware Security Module client certificate.

Delete Selected

Delete the selected certificate from Safeguard for Privileged Passwords.

Assign Certificate to Appliance(s)

Assign the selected certificate to one or more appliances. For more information, see Assigning a Hardware Security Module client certificate.

Unassign Certificate from Appliance(s)

Unassign the selected certificate from one or more appliances.

Refresh Update the list of available Hardware Security Module client certificates.
Hardware Security Module Server Certificates

Go to Hardware Security Module Server Certificates:

  • web client: Navigate to Certificates | Hardware Security Module Certificates | Server Certificates.

To display the following information for the Hardware Security Module server certificate, select a certificate.

Table 190: Server Certificates: Properties
Property Description
Subject

The name of the subject (such as user, program, computer, service, or other entity) assigned to the certificate when it was requested.

Issued By

The name of the certificate authority (CA) that issued the certificate.

Certificate Type

This will be listed as Unknown.

Thumbprint

A unique hash value that identifies the certificate.

Invalid Before

A start date and time that must be met before a certificate can be used.

Expiration Date

The date and time when the certificate expires and can no longer be used.

Use these toolbar buttons to manage Hardware Security Module server certificates.

Table 191: Server Certificates: Toolbar
Option Description

Upload Certificate

Upload a Hardware Security Module server certificate. For more information, see Uploading a Hardware Security Module server certificate.

Delete Selected

Delete the selected certificate from Safeguard for Privileged Passwords.

Refresh Update the list of certificates.

Installing a Hardware Security Module client certificate

To install a Hardware Security Module client certificate

  1.  Go to Client Certificates:
    • web client: Navigate to Certificates | Hardware Security Module Certificates | Client Certificates.

  2. Click Add Certificate.

  3. For Client Public Key, click Upload File.
  4. Select the client certificate public key file and click Open.
  5. For Client Private Key, click Upload File.
  6. Select the client certificate private key file and click Open.

  7. On the Add Client Certificate dialog, click OK. After the certificate has been uploaded, you need to assign the certificate to one or more appliances. For more information, see Assigning a Hardware Security Module client certificate

Assigning a Hardware Security Module client certificate

Safeguard for Privileged Passwords allows you to assign Hardware Security Module client certificates that you have previously uploaded to any appliance in your clustered environment.

To assign a client certificate to appliances

  1.  Go to Client Certificates:
    • web client: Navigate to Certificates | Hardware Security Module Certificates | Client Certificates.

  2. Select a certificate and click Assign Certificate to Appliance(s).

  3. In the Assign Certificate to Appliances dialog, select one or more appliances.

  4. Click OK.

Uploading a Hardware Security Module server certificate

Safeguard for Privileged Passwords allows you to upload Hardware Security Module server certificates.

To upload a Hardware Security Module server certificate

  1.  Go to Server Certificates:
    • web client: Navigate to Certificates | Hardware Security Module Certificates | Server Certificates.

  2. Click Upload Certificate.

  3. Select the server certificate and click Open.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级