Creating RHEL asset with imported SSH key using Safeguard-PS

Hi Robert,

One point to clarify is that ServiceAccountPassword parameter is referring to the actual account password (if any passwords exist for the account itself) rather than the SSH Key file password in this case.

On the other hand, we have created a new feature in 7.4 and above where you can import Assets via CSV file from the Web UI directly:

Reference in 7.4 release notes:

- Creating an Import file: https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/7.4/release-notes/creating-an-import-file

- Importing objects: https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/7.4/release-notes/importing-objects

If you are running an SPP version between 7.0 and lower than 7.4 then you can also try the CSV import which is available via Safeguard-PS module and mentioned in the KB below:

https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/kb/4371459/import-assets-or-accounts-using-csv-in-spp-7-0-or-above

I would suggest to try the CSV import method

Thanks!

Hi Tawfiq

Thanks for your quick response! We run 7.0.2.1 LTS so I have tried with the CSV method as well just now, but the CSV import still goes through Safeguard-PS and I'm still missing the parameters to specify that I want to onboard the Asset with a service account that has an existing key (with a password). Is there no parameter that exists for this?

Or should we do it in two steps where:
1) We onboard all the desired assets with no service account (or any accounts for that matter)
2) We onboard all the service accounts separately with the New-SafeguardAssetAccount command (I created a template for this one and with this one I also don't seem to have the needed parameters for this). I also checked New-SafeguardDirectoryAccount parameters and can't see the option here either.

Am I missing something crucial here? Or is it not possible to add assets with service accounts with existing SSH keys through Safeguard-PS?

Thanks!

Robert

Hi Tawfiq

Thanks for your quick response! We run 7.0.2.1 LTS so I have tried with the CSV method as well just now, but the CSV import still goes through Safeguard-PS and I'm still missing the parameters to specify that I want to onboard the Asset with a service account that has an existing key (with a password). Is there no parameter that exists for this?

Or should we do it in two steps where:
1) We onboard all the desired assets with no service account (or any accounts for that matter)
2) We onboard all the service accounts separately with the New-SafeguardAssetAccount command (I created a template for this one and with this one I also don't seem to have the needed parameters for this). I also checked New-SafeguardDirectoryAccount parameters and can't see the option here either.

Am I missing something crucial here? Or is it not possible to add assets with service accounts with existing SSH keys through Safeguard-PS?

Thanks!

Robert