How to install custom SSL certificate to Read-Only Server?
Hi, It is possible to install unique custom SSL certificate for Primary and Secondary servers with High Availability (PostgreSQL) configuration. While installation of custom SSL certificate on Primary server with Read-Only Server configuration is still
VNC Accounts - Password Conflicts
Hi, How do you avoid Password Conflicts on VNC accounts? Since build 12100, " VNC passwords have to be added as an account under the respective resources." The issue is the VNC account is not a local account on the machine, so can't be verified. There's
video recording
recording session can be activated only for some privileged accounts and not others ?
Incorrect Username
#Issue# The username field in the users tab shows firstname+lastname. Username is usually synonymous with login name so this is likely to cause confusion. #Reccomendation# Add an additional field called full name for firstname+lastname and have username
Request: Allow User/Computer Import Time Change
#Issue# Currently you are only able to change the run time on "scheduled tasks" (Admin>Scheduled Tasks) not on synchronization scheduled for AD users or AD computers. This means I found have to be awake and schedule a device import at 1am if that is the
Request: Change Superuser Notification
#ISSUE# I don't think it makes much sense to list all superuser accounts to all users. This has the potential to give users a list of people to randomly email with problems, and isn't useful to them anyway. #Solution# I think the superuser list should
Request: 2FA Codes
There is currently no way to add 2FA codes to passwords. It would be nice to have the ability to see current 2FA codes for an account.
Passing AUTHTOKEN via Header instead of URL parameter when calling the REST API
Currently I'm using the AUTHTOKEN parameter when calling the REST API but want to switch to using the AUTH Header option instead, can someone give me the correct format of the AUTH Header? For example if I was using OAUTH is would do a "Authorization",
[Analytics Plus e-book] Key metrics that should be part of your cybersecurity dashboard
Hey there, Are you tracking seemingly-endless security metrics? Discover the critical metrics that are essential in fortifying your organization's security posture, and build powerful consolidated security dashboards to combat emerging threats with ease.
Password Sync Notification
#Issue# The "Passwords not in sync" alert includes web accounts, which PMP cannot check. #Solution# Add an option to ignore a password/resource for sync check. It makes no sense to notify on a password it can't check.
Need AD import filtering
The AD import feature is not adequate enough to import. We need the option to filter what and what not to import by the use of LDAP query strings and a way to selectively choose the domains and OUs to import from.
Connect to a RDP ressource and leave user typing login/password ?
Hello, I've added a Windows server ressource not in my domain and i would like PMP to let user type it's login/password in that domain rather than ask all users to add their credential for this specific resource. Is it possible ? Thank you
ansible plugin
I'm trying to get ansible plugin work with PMP but I've a problem... Ansible plugin issues two api requests apparently: (1) https://<URL>/restapi/json/v1/resources/getResourceIdAccountId?APP_AUTHTOKEN=<TOKEN>&APP_NAME=Ansible&RESOURCENAME=<RESOURCE_NAME>&ACCOUNTNAME=root which returns RESOURCEID and ACCOUNTID. This one works fine. But the second call: (2) https://<URL>/restapi/json/v1/resources/getResourceAccountDetails?APP_AUTHTOKEN=<TOKEN>&APP_NAME=Ansible&RESOURCEID=45022&ACCOUNTID=48640 which
PMP ApiKey
If I generate an apiKey for a user and set the key to expire in 90 days, then in 30 days generate a new apiKey that expires in 90 days, is the first key still valid for the original 90 days or does it get invalidated when the second key is generated?
Grouping resources using a hierarchy.
Good Afternoon, Is there a way that you can group resources so they are in a hierarchy tree, example - a folder that shows Rochester and under that folder lists all the resources for that location. I know that we can create groups and add resources to
Bulk user deletion
Hello I accidently imported all users from AD (like 111 000 users) - in fact i do not know how its happened (i added some ad group to be imported but they should contain smaller number of users) In logs i can see a lot "Inside createUserGroup mentod....|"
Allow on resource level if an user may retrieve/view the plain text passwords
In PMP the administrator can control the plain text view of passwords only on group level. Want to be more in control. The user must be able to retrieve the passwords from some of the resources.
Azure AD SAML SSO and AAD joined devices (docs outdated)
We've recently set up SAML SSO authentication to Azure AD on our PMP instances. All configuration was done according to the ManageEngine guide Configuring SAML Single Sign-On (SSO) for Azure AD Users (manageengine.com) However some users reported the
Backing up PMP
Is it ok to shut down the PMP server and just do a snapshot instead of copying the "PMP" install folder? The install folder keeps getting bigger and longer to backup and its becoming distruptive in the amount of time it takes to make a copy.
Failed Logon Attempts
Hi, We're noticing that whenever PMP changes the password of an account on a remote client device a failed logon attempt is recorded on the client and on the domain controllers. We first spotted this when ADAudit started reporting hundreds of failed logons.
PMP RADIUS Console Authentication using Microsoft NPS Server
Hi, Does anyone out there have PMP set up to allow login to the console using RADIUS authentication (and I don’t mean use RADIUS for 2FA with Active Directoy authentication), using Microsoft NPS Server as the RADIUS server? If so, can you advise on the
Setting up MFA on Password Manager Pro utilising Microsoft NPS as the RADIUS authenticator
Hi all Has anyone been able to correctly set up PMP with MFA that uses Microsoft NPS as the RADIUS server. We have managed to get it working fine using Microsoft Authenticator, however when it asks for the RADIUS code you can input anything into this
Implementing a Password Manager Pro read only server
Hi all I saw with interest that a recent update has implemented a read only server option to PMP. We currently use a High Availability set up and thought that a read only server would remove the downtime when we are patching and upgrading the Primary
How to automate update of Resource's hostname and/or IP address change
Hi, We add new Resource and Accounts to PMP via API automatically when a new VM is created (using post install script). We need to manage a Privilege account and a Service account with PMP. Once the VM is turn over to user, the user might change the hostname
How to add DNS NAME via API?
Hi, I'm adding Resource via API, it was created successfully, but DNS NAME is not updated. What am I doing wrong? curl -X POST -k -H "AUTHTOKEN:1XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXX98" -H "content-Type: text/json" https://10.10.10.10:443/restapi/json/v1/resources
PMP recommended vCPU for VM Installation
Hi, What is the required/recommended vCPU of PMP for VM installation (WinServer OS)? I cannot find this in the sizing guidelines. Regards, Bryan
Problem renaming data directory
URGENT, We need to restore password manager pro from the backup .ezip file on a newly created server due to a server crash of the prod server and we are unable to do so due to this error, R0DD03: Problem renaming data directory. also the directory :\PMP\pgsql
Subgroup option is not avalible
Hello I have two Password Manager Pro instances. One old (kept just for backup) version 9.3.0. The other one is newest (i believe) version 12.3.0 And my issue is that on the old one I can create Subgroups, but on the newest one this option is missing
Problem logging into PMP
Hello, my scenario is: For some reason the admin user of my PMP does not let me login to the console, so I opened a ticket with Manageengine support and they provided me with some .bat files to reset the password via pmp_key.key. These files did let me
Dynamic Group and Resources added by API
Hi, I have a Dynamic Group with criteria to match a specific user account name. This works fine with Resources added manually and by Agent. However, it does not work for Resources added by API and shared with my id. These API added resources showed up
Database size issue due to broken HA not fixed after removing HA configuration
We recently had to engage support because our HA deployment of PMP was broken and had been probably since deployment of the servers. The status page for HA showed an ever increasing number under the pending replication count and what triggered us to the
API User for multiple host
Could someone provide the steps to configure an API user to be used in multiple hosts instead of associate to one host only? I saw a thread from last year and Support mentioned an option that can be configured. Thank you!
update command for re-Installing agent don't work
Hi, In the context of automating the deployment of the PMP agent. I realized that the "update" command of the AgentInstaller.exe executable was not fully working. The re-installation seems to run but in the end the agent is not authorized. While with
Password reset of local accounts - Password Manager Pro
Hello everyone, how are u? I have PMP on premise running on my enviroment, and I wanna configure it to reset local accounts passwords (of others servers that where is installed the app) when I request those passwords from PMP app. Is this possible? Data:
Approve password access requests without viewing the password.
All password accounts shared with a user approving password access requests, the user enables administrator privileges; and can view all password accounts shared with that user. It would be an improvement to remove approving users from seeing passwords
Agent installation from DS server
i encounter this issue alot, whenever u try to install an agent on computers in a remote office that has the DS UP and running, it shows the following Error msg "Unable to get the agent status. Operation timed out." the local firewall is down, and the
Account for change password
Hi, my scenario is: - 1 host windows where PMP is installed - 6 host linux (centos7) to control user account password - all hosts are visible and stay in same net without any firewall. only connect throught switch. Since i can't use the root account (in
Chrome extension no longer auto populates credentials
I've used the Chrome extension for password manager pro for years. This week it stopped auto populating the username/password fields on sites. I can still manually copy/paste credentials from the extension though. Any tips? I've cleared my cache, and
Cuentas de dominio para acceso a servidores en PMP
Hola,
Tengo una duda sobre el uso de PMP, a ver si me la explico bien:
Tenemos un cliente que quiere usar dentro de un recurso de Windows algunas cuentas de Active Directory que ha creado limpiamente para usar para conectar a los recursos. No se creará
Read-Only Server Setup Questions
Hello, 1. Does Updating PMP work the same with the new RO server setup as it does with the older HA set up? Meaning I go through the update as usual on primary but then I have to uninstall the software on the RO server, go through the RO set up again?
Next Page