Providing Endpoint User Accounts

To provide endpoint user accounts:

1. Log in as an Administrator, and go to Settings > Server Accounts.
2. Click Edit Credentials:

   

3. For each user account, configure the account:

   

   • Account Type: Whether it should be used for Windows machines or for Linux machines. An additional AWS Windows type is available for convenient access to AWS-native Windows instances.
   • Account name: A descriptive label for the account
   • Username and Password: Local or domain-based user details.
     • For Windows domain accounts, use either the username@domain or domain\username convention.
       For Windows local accounts, it is possible to simply type the username. However some Windows configurations may require a domain syntax even for local users, so it is recommended to use .\username for local users.
     • For Linux accounts, either the root user or a different user with sudo permission can be used. If using a user with sudo permission, the sudoer definition for this user must not require password re-entry when running the sudo command. This can be achieved by adding the following line to the sudo configuration (assuming the user name is myuser):

       myuser ALL=(ALL) NOPASSWD: ALL

   • Private Key and Private Key Passphrase: For Linux and AWS Windows account types you can select to use an SSH private key instead of a password, in which case you can then Upload an OpenSSH private key file and optionally provide its passphrase.
     • JetPatch Agent Manager currently supports private keys in plain and encrypted PEM and PKCS8 formats. Supported key files start with one of the following prefixes: BEGIN RSA PRIVATE KEY, BEGIN ENCRYPTED PRIVATE KEY or BEGIN RSA PRIVATE KEY. Currently key files in the new OpenSSH format, i.e. files that start with BEGIN OPENSSH PRIVATE KEY, are not supported.

     For Microsoft Windows instances launched in AWS, if you wish to use the random administrator password generated by AWS, choose 'AWS Windows' account type and upload the SSH private key associated with your AWS Windows instances. JetPatch Agent Manager will ask AWS for an encrypted copy of the random administrator password for each AWS Windows server, and then use the private key to temporarily decrypt this password to access each instance.

     For AWS Linux instances: Please note that different operating system images in AWS may use a different username even when sharing the same private key, and so multiple access accounts need to be defined for them. For example, while Red Hat Enterprise Linux instances typically use the ec2-user username, Ubuntu instances tend to use the ubuntu username, and SuSE Linux instances use root as the username. Refer to the AMI details page in AWS for info on the username used with any AMI.

4. Click OK.
5. Click Close.

To disable an account (for example, before changing a password, to avoid the account being locked due to repetitive login failures), click .