Creating RHEL asset with imported SSH key using Safeguard-PS

Hi Robert,

One point to clarify is that ServiceAccountPassword parameter is referring to the actual account password (if any passwords exist for the account itself) rather than the SSH Key file password in this case.

On the other hand, we have created a new feature in 7.4 and above where you can import Assets via CSV file from the Web UI directly:

Reference in 7.4 release notes:

- Creating an Import file: https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/7.4/release-notes/creating-an-import-file

- Importing objects: https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/7.4/release-notes/importing-objects

If you are running an SPP version between 7.0 and lower than 7.4 then you can also try the CSV import which is available via Safeguard-PS module and mentioned in the KB below:

https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/kb/4371459/import-assets-or-accounts-using-csv-in-spp-7-0-or-above

I would suggest to try the CSV import method

Thanks!

Hi Tawfiq

Thanks for your quick response! We run 7.0.2.1 LTS so I have tried with the CSV method as well just now, but the CSV import still goes through Safeguard-PS and I'm still missing the parameters to specify that I want to onboard the Asset with a service account that has an existing key (with a password). Is there no parameter that exists for this?

Or should we do it in two steps where:
1) We onboard all the desired assets with no service account (or any accounts for that matter)
2) We onboard all the service accounts separately with the New-SafeguardAssetAccount command (I created a template for this one and with this one I also don't seem to have the needed parameters for this). I also checked New-SafeguardDirectoryAccount parameters and can't see the option here either.

Am I missing something crucial here? Or is it not possible to add assets with service accounts with existing SSH keys through Safeguard-PS?

Thanks!

Robert

One more quick entry to this as a response, you said:

"[The] ServiceAccountPassword parameter is referring to the actual account password (if any passwords exist for the account itself) rather than the SSH Key file password in this case.

I suspected as much but then what parameter does refer to the SSH key password, how can we get this to work with the import? Thanks again!

I checked further and it seems what you are looking to accomplish is only possible in the Feature release branch as part of the new mentioned feature allowing Import of Assets via CSV in the Web UI in SPP release v7.4 and above.

These features will eventually be included in the next major LTS release of v8.0

The CSV template from 7.4 has a column header for ConnectionProperties/ServiceAccountSshKey/Passphrase which is the column used for the SSH Key password.

Thanks!

Your response is greatly appreciated! In that case we'll switch over to the feature release branch because we have around 730 assets to import like this and we're not too keen on doing it manually. I hope it will work well with the 7.4.1 version, without too many hiccups along the way.

Kind regards
Robert