Home Guides API Reference

Getting Started

Quick PrivX Setup

Quick SSH Access

Importing Users And Hosts

Configuring SSH Target Host to Accept PrivX Connections

Deployment

Release Notes for This Release

Preparing for Deployment

Get PrivX Software

Setting Up PrivX Components

Deploying PrivX to Amazon Web Services

Deploying PrivX to Google Cloud Platform: architecture blueprint

Deploying PrivX to Azure: architecture blueprint

Deploying PrivX to Oracle Cloud

Deploying to Kubernetes

High-Availability Deployment

License Management

Backup and Restore

Native SSH and RDP Clients

Production-Readiness Checklist

Integrating PrivX With XSOAR

FIPS-Approved Mode of Operation

Users and Permissions

Adding PrivX Users

Granting User Permissions

Managing Workflows

User Configuration

Additional Authentication Methods

Managing User Secrets

Password Change for AD and LDAP Users

Managing User Sessions

Authenticating to Hosts

Supported Authentication Methods

SSH Certificate Authentication

RDP Certificate Authentication

VNC Certificate Authentication

Script-Based Certificate-Authentication Setup

Certificate-Authentication Setup via Chef

Manual Certificate Authentication Setup

Public Key Authentication

Stored Passwords

Example VNC-Server Setup

Trusting Target-Host Identities

Connection Management

Setting up Hosts

Connecting via The PrivX GUI

SSH Connections with Native Clients

RDP Connections with Native Clients

Database Connections with Native Clients

Network Targets

Website Access via PrivX

AWS CLI Connection with Native Client

Monitoring and Managing Connections

Automatic M2M SSH Connections

Auditing

Viewing Audit Data

SIEM Integration

Session Recording

External Logging

Matching Certificate-Based-Login Messages

Audit Events Reference

Splunk Integration

UEBA Configuration

Exporting List Data

Advanced Configuration

SSL/TLS Security

PrivX-Server Configuration

Extender Configuration

Carrier and Web Proxy Configuration

API-Client Integration

Configuring Ephemeral Credential Access For Aws Api

Certificate Authentication For Code Repositories

Network Target Access

Rotating Stored Passwords

Ssh Command Restrictions

GUI Configuration

Admin Command-Line Tool

Disk-Space Alerts

Audit Event Indexing for Faster Searches

Password Management for AD/Entra Domains

Integrations

User Directories

Host Directories

PrivX as OIDC Identity Provider

Troubleshooting

General Troubleshooting

Authentication and Login Issues

Directory and User Management Issues

Certificate and Encryption Issues

Microservices and Deployment Issues

Connection Issues

Permission and Access Issues

Installation and Upgrade Issues

Knowledge Base

PrivX microservices architecture

PrivX web access architecture

Websockets and the PrivX Carrier browser

Customizing the PrivX Carrier browser

PrivX RDP Admin Access Deployment in Multi-Domain Environment

Onboarding SSH target hosts to PrivX via Ansible

Onboarding SSH target hosts to PrivX via Chef

Onboarding AWS, Azure & Google Cloud SSH target hosts the simple way

Enabling TLS 1.3

Removing Hosts from Directories

Configuring Gitlab access through PrivX SSH certificate authentication

PrivX Analytics

Connection method vs feature matrix

Setting up and upgrading PrivX with custom network ports

Supported SSH Algorithms

Supported SFTP Protocol Versions

Granting Password-based root access via Roles

Requesting and granting roles, Passwordless Access

Passwordless SSH And RDP Access

PrivX AWS High Availability Installation tith two ELBs

How to install PrivX

OSS Acknowledgements

End-user license agreement (EULA)

Documentation Conventions

Previous Release Notes

PrivX Login Flow and State Storage

Changing PrivX database name, username or password

Changing notification mechanism to PostgreSQL

Migrate from CentOS 8

Merging changes Oon Extender/Carrier/WebProxy upgrade

Mapping Directory Users to Additional Accounts

Upgrade from Older Releases

Improve performance with indexing

Migrate from EOL Operating Systems

PrivX on Kubernetes

Managed Accounts as Reusable Credentials

Features Available During Zero-Downtime Upgrade

Certificate-Authentication Support in Full-Enforcement Domains

Accessibility Conformance Report

PrivX Comparisons

FAQ

Auditing & Reporting

Authentication, Access Control and Identity Management

Buying And Trying

Data Encryption

Functional Use Cases

Integrations And System Monitoring

Operation Security Maintenance

Operational Technology (OT)

PrivX Components

Product Features

Session Recording and Playback

Support and Services

Tips and Tricks

PrivX LTS (Long-Term Support) Introduction

Knowledge Base

Onboarding AWS, Azure & Google Cloud SSH target hosts the simple way

See Target host SSHD configuration

Was this page helpful?