Ensure that the Task Manager module is installed.
The task manager component of Privileged Account Manager (taskmanager) is supported only on Windows, SLES 12 (64-bit), SLES 15 (64-bit), RHEL 7.5 (64-bit), or RHEL 8(64-bit).
NOTE:
For RHEL 8 (64-bit) and RHEL 7 (64 bit), install the redhat-lsb-core package.
For SLES 12 (64-bit) and SLES 15 (64-bit), install the lsb-release package.
If you want to configure task manager on a separate agent, you must first install Privileged Credential Manager package (prvcrdvlt) and Access Manager package (auth), and then install Task Manager (taskmanager) module in the agent.
If you have multiple host domains in Privileged Account Manager, you must have Task Manager module installed on every host domain.
For more information about installing a package in Privileged Account Manager, see Installing Packages on a Host.
If you have configured a Windows machine as task manager, ensure the following:
Powershell 4.0 or later must be installed in the Windows machine where you are installing the Task Manager module.
Windows Remote Management (WinRM) service must be running on the Windows machine. To start winrm service, use the command:
Enable-PSRemoting –force
Add a target machine, where the password must be changed, to the WinRM trusted host. To add all servers as trusted host, use the command:
winrm set winrm/config/client '@{TrustedHosts="*"}'
Set the PowerShell execution policy to Remotesigned using the command:
Set-ExecutionPolicy -ExecutionPolicy RemoteSigned
Ensure the following is done on the target machine where the password must be changed.
In Windows machine:
Powershell 2.0 or later must be installed in all the windows target machines as Privileged Account Manager uses PowerShell scripts to change password.
Windows Remote Management (WinRM) service must be running on the Windows machine. To start WinRM service, use the command:
Enable-PSRemoting –force
IP address of the task manager must be added to the trusted host of the target machine. To add trusted host, use the command:
winrm set winrm/config/client '@{TrustedHosts="x.x.x.x"}'
In AIX machine, configure the following:
Specify AcceptEnv LC_ALL in the sshd_config file.
Restart sshd service.