Security Privileged Identity Manager AccessProfile for VMware vCenter

Download

Abstract

Privileged identity management AccessProfile for the VMware vCenter Single Sign-On web console.

Download Description

This package contains the check-out and check-in AccessProfile for VMware vCenter Single Sign-On web console.

You must customize this AccessProfile before you can use it. For more information, see the Installation Instructions section.
Sessions are recorded as a GUI-based recording.

New features or updates
Known issues and limitations
Compatibility matrix
Supported languages
Prerequisites
Installation Instructions

New features or updates

November 2018
Added support for session recording and single sign-on for Mozilla Firefox ESR 60.

May 2018
Multi-tab recording for Internet Explorer 11 is supported starting from the following fix pack versions:

IBM Security Privileged Identity Manager, Privileged Access Agent 2.1.1
IBM Security Privileged Identity Manager, Privileged Access Agent fix pack 2.1.0-ISPIM-AA-FP0009
IBM Security Access Manager for Enterprise Single Sign-On AccessAgent fix pack 8.2.2-ISS-SAMESSO-AA-FP0015

To enable this feature, deploy one of these supported fix packs and update to the VMware vCenter, version 1.3 or later AccessProfile.

Date	Description
30 November 2018	AccessProfile version 1.4 -Added support for session recording and single sign-on for Mozilla Firefox ESR 60.
4 May 2018	AccessProfile version 1.3. - Updated AccessProfile with multi-tab support. AccessProfile version: 1.2 - Updated AccessProfile widgets with backward compatibility support.
31 October 2017	AccessProfile version: 1.1 - Updated AccessProfile widgets.
30 June 2017	Initial release. Added support for check-out and check-in of privileged credentials for the VMware vCenter Single Sign-On (HTML 5) web console.

Known issues and limitations

APAR	Description
None.	Internet Explorer Enhanced Protected Mode (EPM) is not supported.
None.	AccessProfile version 1.2 The following limitations apply to Internet Explorer only. Keyboard key strokes may not be recorded. Multiple tabs or windows for the same web application may not be recorded. Closing the first tab that initiated checkout or recording might result in check-in of the credential.

Only GUI based recording is supported.

Compatibility matrix

Supported components
AccessProfile version 1.4

Privileged Access Agent 2.1.1 with fix pack 1 or later.
Internet Explorer 11, Mozilla Firefox ESR 60

AccessProfile version 1.3

IBM Security Privileged Identity Manager
- Version 2.1.1 requires Privileged Access Agent 2.1.1.
- Version 2.1.0 requires Privileged Access Agent 2.1.0 with fix pack 9 or later.
- Version 2.0.2 requires AccessAgent 8.2.2 with fix pack 21 or later.
VMware vCenter Single Sign-On (HTML 5) Web Console Version 6.5.0
Internet Explorer 11, Mozilla Firefox ESR 52

AccessProfile version 1.2

IBM Security Privileged Identity Manager
- Version 2.1.1 requires Privileged Access Agent 2.1.1.
- Version 2.1.0 requires Privileged Access Agent 2.1.0 with fix pack 9 or later.
- Version 2.0.2 requires AccessAgent 8.2.2 with fix pack 21 or later.
- Version 2.0.1, 2.0.0, 1.0.1.1, 1.0.1 requires AccessAgent 8.2.1 with interim fix 20 only.
- VMware vCenter Single Sign-On (HTML 5) Web Console Version 6.5.0
Internet Explorer 11, Mozilla Firefox ESR 52

Supported languages

Built and tested on the English language platform only.

Prerequisites

IBM Security Privileged Identity Manager 1.0.1 or later is deployed.
If you have an existing VMware vCenter Single Sign-On (HTML 5) web console AccessProfile, back up the existing AccessProfile, and then delete it before you upload the new VMware vCenter AccessProfile.

For more information about AccessStudio or AccessProfiles, see the product documentation.

Installation Instructions

Download the package.
Extract the AccessProfile to a location on your computer.
Open the AccessProfile in AccessStudio and specify the signature of the VMware vCenter Server target host environment.
1. In AccessStudio, in the AccessProfiles pane, click profile_VMware_Vcenter.
2. Under the General Properties tab, in the *Signatures identifying web-page or exe where this AccessProfile is to be loaded area, click Add.
3. In a browser, open the VMware vCenter Server administrative console login page.
4. In the AccessStudio Signature Generator pane, under Signature for, choose web.
5. Drag the Finder tool to the browser content pane with the VMware vCenter Single Sign-On (HTML 5) web console page displayed.
  You want to generate a signature in the following form:
  /child::web[@domain="vcenterhost.example.com" and @protocol="https"]
  
  For example:
  
  Note: If your vCenter Single Sign-On deployment includes a port number in the URL, the signature might appear in the following form:
  /child::web[@domain="vcenterhost.example.com" and @protocol="https" and @port="someport"]
6. Click OK to finish.
Upload the AccessProfile.
1. Open the AccessProfile with AccessStudio.
2. Select the AccessProfile from the Data type pane.
3. From the toolbar, click Upload selected data to IMS.

For more AccessProfiles, go to the AccessProfile Library.

Download Package

Release	Download
Version 1.4 30 November 2018	prf_VMware_Vcenter_1.4.eas
Version 1.3 4 May 2018	prf_VMware_Vcenter_1.3.eas
Version 1.2 4 May 2018	prf_VMware_Vcenter_1.2.eas

Off

[{"Product":{"code":"SSRQBP","label":"IBM Security Privileged Identity Manager"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF033","label":"Windows"}],"Version":"1.0.1;1.0.1.1;2.0.0;2.0.1;2.0.2;2.1.0;2.1.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Tips