In this article, you will learn how to execute the function of password rotation in Windows servers.
Installing the script (Shell Script)
First step: enable Password Rotation
Some passwords may have password rotation turned off. To activate, access the Passwords menu and click on the password you want to edit:
Once done, access the Password Rotation tab and enable the option that appears and click Save:
Second step: Access Password Rotation
Navigate to the Passwords menu and look for the desired credential to rotate. Click Actions->Password Rotation.
Third step: Download the file
In the window that opens, click the Download Windows Script (PowerShell) button
After the download is complete, move the file to the computer that will perform the password rotation process.
Fourth step: Generate a key
In the vault again, click on the Generate key button.
This key will be used for communication between your computer and your safe to carry out the password rotation process.
Copy the key.
Note: This key is displayed while the window is open, after closing the window the key cannot be recovered, requiring the creation of another one.
Fifth step: Make settings in PowerShell
Inside the computer that will perform the rotation, open a PowerShell with Administrator privileges.
Navigate to the rotation script location and run the following scripts in order:
cd C:\script location2.
.\VaultOnePasswordRotationInstaller.ps1
Follow the steps to install the script
a) In the first step, you must select whether the user is local or from the Active Directory domain (Active Directory users must be in the same domain as the computer used)
b) In the second step, you must enter the key that was generated previously.
After script configuration is complete, password rotation will be performed on the next run.
If you have problems running your script, see the Troubleshooting section to fix the problem.
Notice for Active Directory users
The user that runs the rotation script needs to have the Reset Pasword permission and it must be with higher group level permission than the user that will have their password rotated.
Found your answer? If you have any questions, send us an email! [email protected]