Documentation Version: er2.0.28-docs-1.1

Target Credential Manager

The Target Credential Manager manages the credentials for Target locations that require user authentication for access.

The section covers the following topics:

Credential Permissions

Resource permissions and Global Permissions that are assigned to a user grants access to perform specific operations for Target credentials.

Operation Definition Users with Access

View credentials

Access to view credentials when setting up a scan or via the Resource Permissions Manager.
  1. Global Admin
  2. Permissions Manager.
  3. Users that have Use or Edit Credential privileges assigned through Resource Permissions.
Add credentials User can add credentials when setting up a Scan for a Target.
  1. Global Admin
  2. Users that have Scan privileges assigned through Resource Permissions.

Add credentials (Global)

User can add credentials for all Target platforms via Target Credential Manager
  1. Global Admin

Use credentials

Access to use credentials when scanning a Target.
  1. Global Admin
  2. Users that have Use Credential privileges assigned through Resource Permissions.
Edit credentials

User can edit credentials.

  1. Global Admin
  2. Users that have Edit Credential privileges assigned through Resource Permissions.

Global Admin users have full access to all credentials. A Permissions Manager user can view all existing credentials and assign users permissions to use or edit these credentials via the Resource Permissions Manager.

All users can Add Target Credentials, but can only use or edit the credential sets to which they have been explicitly assigned permissions to.

Granting users permissions to a credential set does not automatically grant the user access to the Target location it applies to.

See Resource Permissions for more information.

For remote scanning of live target types, the configuration of credentials is required for each account unless otherwise stated.

For supported target types where no specific version is specified, Ground Labs support is limited to versions the associated vendor still provides active support, maintenance and software patches for.

Supported platforms may change from time to time and this is outlined in this product documentation.

Using Credentials

Credential sets that are saved in the Target Credential Manager appear in the Stored Credentials field when adding Targets to scan.

Only credential sets which the user has permissions to will appear in the Stored Credentials field.

You can use a new credential set when you enter a value in the Credential Label, Username and Password fields.

Once the Target is added to ER2, the Credential Details that were provided are automatically saved to the Target Credential Manager under the specified Credential Label.

Add Target Credentials

A user can add new credentials to the Target Credential Manager in two ways:

To Add a Credential Set Through the Target Credential Manager

  1. Go to SCANNING > TARGET CREDENTIAL MANAGER.
  2. On the top-right of page, click +Add.
  3. In the New Credentials page, enter a descriptive label in the Credential Label field.
  4. Select the Target Type:
    Target TypeDescription
    Cloud

    From the Storage Provider list, select your cloud storage provider.

    Each cloud storage provider requires different credential formats. See Add Targets.

    Server

    In the New Credentials page, enter your:

    • User name.
    • Password.

    (Optional) Click Browse to upload a P12 key or SSL certificate.

    Users automatically have use and edit permissions for credential sets that they create.


Edit Target Credentials

You can edit previously saved credentials through the Target Credential Manager:

  1. Hover over the Target credential set that you want to edit on the Target Credential Manager.
  2. Click Edit to edit the credentials.