IBM Support

Security Privileged Identity Manager AccessProfile for VMware vCenter

Download


Abstract

Privileged identity management AccessProfile for the VMware vCenter Single Sign-On web console.

Download Description

This package contains the check-out and check-in AccessProfile for VMware vCenter Single Sign-On web console.

You must customize this AccessProfile before you can use it. For more information, see the Installation Instructions section.
Sessions are recorded as a GUI-based recording.

New features or updates

November 2018
Added support for session recording and single sign-on for Mozilla Firefox ESR 60.

May 2018
Multi-tab recording for Internet Explorer 11 is supported starting from the following fix pack versions:

To enable this feature, deploy one of these supported fix packs and update to the VMware vCenter, version 1.3 or later AccessProfile.
 

Date Description
30 November 2018 AccessProfile version 1.4
-Added support for session recording and single sign-on for Mozilla Firefox ESR 60.
4 May 2018 AccessProfile version 1.3.
- Updated AccessProfile with multi-tab support.

AccessProfile version: 1.2
- Updated AccessProfile widgets with backward compatibility support.
31 October 2017 AccessProfile version: 1.1
- Updated AccessProfile widgets.
30 June 2017 Initial release.
Added support for check-out and check-in of privileged credentials for the VMware vCenter Single Sign-On (HTML 5) web console.

 

 

Known issues and limitations

 

APAR Description
None. Internet Explorer Enhanced Protected Mode (EPM) is not supported.
None. AccessProfile version 1.2
The following limitations apply to Internet Explorer only.
  • Keyboard key strokes may not be recorded.
  • Multiple tabs or windows for the same web application may not be recorded.
  • Closing the first tab that initiated checkout or recording might result in check-in of the credential.


Only GUI based recording is supported.

 

 

Compatibility matrix

Supported components
AccessProfile version 1.4

  • Privileged Access Agent 2.1.1 with fix pack 1 or later.
  • Internet Explorer 11, Mozilla Firefox ESR 60


AccessProfile version 1.3

  • IBM Security Privileged Identity Manager
    • Version 2.1.1 requires Privileged Access Agent 2.1.1.
    • Version 2.1.0 requires Privileged Access Agent 2.1.0 with fix pack 9 or later.
    • Version 2.0.2 requires AccessAgent 8.2.2 with fix pack 21 or later.
  • VMware vCenter Single Sign-On (HTML 5) Web Console Version 6.5.0
  • Internet Explorer 11, Mozilla Firefox ESR 52


AccessProfile version 1.2

  • IBM Security Privileged Identity Manager
    • Version 2.1.1 requires Privileged Access Agent 2.1.1.
    • Version 2.1.0 requires Privileged Access Agent 2.1.0 with fix pack 9 or later.
    • Version 2.0.2 requires AccessAgent 8.2.2 with fix pack 21 or later.
    • Version 2.0.1, 2.0.0, 1.0.1.1, 1.0.1 requires AccessAgent 8.2.1 with interim fix 20 only.
    • VMware vCenter Single Sign-On (HTML 5) Web Console Version 6.5.0
  • Internet Explorer 11, Mozilla Firefox ESR 52

 

Supported languages

Built and tested on the English language platform only.

Prerequisites

  • IBM Security Privileged Identity Manager 1.0.1 or later is deployed.
  • If you have an existing VMware vCenter Single Sign-On (HTML 5) web console AccessProfile, back up the existing AccessProfile, and then delete it before you upload the new VMware vCenter AccessProfile.


For more information about AccessStudio or AccessProfiles, see the product documentation.

 

 

 

 

Installation Instructions

  1. Download the package.
  2. Extract the AccessProfile to a location on your computer.
  3. Open the AccessProfile in AccessStudio and specify the signature of the VMware vCenter Server target host environment.
    1. In AccessStudio, in the AccessProfiles pane, click profile_VMware_Vcenter.
    2. Under the General Properties tab, in the *Signatures identifying web-page or exe where this AccessProfile is to be loaded area, click Add.
    3. In a browser, open the VMware vCenter Server administrative console login page.
    4. In the AccessStudio Signature Generator pane, under Signature for, choose web.
    5. Drag the Finder tool to the browser content pane with the VMware vCenter Single Sign-On (HTML 5) web console page displayed.
      You want to generate a signature in the following form:
      /child::web[@domain="vcenterhost.example.com" and @protocol="https"]

      For example:



      Note: If your vCenter Single Sign-On deployment includes a port number in the URL, the signature might appear in the following form:
      /child::web[@domain="vcenterhost.example.com" and @protocol="https" and @port="someport"]
       
    6. Click OK to finish.
  4. Upload the AccessProfile.
    1. Open the AccessProfile with AccessStudio.
    2. Select the AccessProfile from the Data type pane.
    3. From the toolbar, click Upload selected data to IMS.

 


For more AccessProfiles, go to the AccessProfile Library.

 

 

 

Download Package

Release

Download

Version 1.4

30 November 2018

prf_VMware_Vcenter_1.4.eas
Version 1.3
4 May 2018
prf_VMware_Vcenter_1.3.easprf_VMware_Vcenter_1.3.eas
Version 1.2
4 May 2018
prf_VMware_Vcenter_1.2.easprf_VMware_Vcenter_1.2.eas

Off
[{"Product":{"code":"SSRQBP","label":"IBM Security Privileged Identity Manager"},"Business Unit":{"code":"BU008","label":"Security"},"Component":"--","Platform":[{"code":"PF033","label":"Windows"}],"Version":"1.0.1;1.0.1.1;2.0.0;2.0.1;2.0.2;2.1.0;2.1.1","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
29 November 2018

UID

swg24043800