How to configure a password change

  • 2 minute(s) read
Prev Next

This document provides step-by-step information on registering a password change request.

Requirements

  • Have a credential for password change.
  • Create or select the template to be used.
Attention

For security reasons, for the automatic password change of a credential to occur, an analyst must manually request the first change of the credential configured in Segura. This action is only necessary on the first request to execute a password change. After the first change, Segura will automatically perform the changes according to the credential's password policy.

Configure the credential for password change

  1. In Segura, on the navigation bar, hover the mouse over the Product menu and select PAM Core.
  2. In the side menu, select Credentials > All Credentials.
  3. In the actions menu, click Add, or in the list of available credentials, click the Actions button and select Edit, to configure an existing credential.
  4. On the credential registration screen, on the Information tab, fill in the required fields.
    Info

    To learn how to register a credential, access How to set up a credential in Segura document.

  5. On the Execution settings tab, fill in the fields:
    1. Parent credential: you can use it to change the password of this credential when the selected parent credential has its password changed.
      Info

      The child credential will always assume the same password as the parent credential.

    2. Check the Enable automatic change checkbox.
    3. Select the password change plugin from the Change plugin dropdown menu.
    4. Select the change template from the Change template dropdown menu.
    5. If you want to use the credential itself to make the change, check the Use own credential to connect checkbox. If you want to use another credential to make the change, select the credential to be used from the Authentication credential dropdown menu.
  6. Go to the Review tab and click Save.
Info

The Parent credential works as a key for password changes. When the password change process is initiated for the parent credential, all child credentials are also automatically changed. However, a parent credential doesn’t prevent the child credential from being changed manually or by other automatic processes.

Attention

The password change won’t be performed when multi-factor authentication is enabled or when manual interaction is required.

Request password change

  1. In Segura, on the navigation bar, hover the mouse over the Product Menu and select Executions.
  2. In the side menu, select Password Operations > All Operations.
  3. In the actions menu, click Request password change.
  4. On the displayed screen, fill in the fields:
    1. Credential: choose from the available credential options for change.
    2. Scheduling date: select a date and time for scheduling.
  5. Click Save.

In the report list, the request will have the status of Scheduled. In the Actions button available in the record line, you can select Request immediate execution, which will override the scheduling and attempt the change immediately, or Cancel operation.

Info

Automatic changes will depend on the credential policy applied. To learn more, access the How to create a credential policy document.

Do you still have questions? Reach out to the Segura Community.