Thycotic Secret Server v10.9 Installation and Configuration Notes - NETSEC

Latest

Learning, Sharing, Creating

Cybersecurity Memo

Thursday, December 3, 2020

Thycotic Secret Server v10.9 Installation and Configuration Notes

This post summarizes some basic installation steps and configuration notes. 

  • Installation
  • Licensing and AD integration
  • Syslog Integration
  • Email Integration
  • IIS Crypto
  • Backup & Restore
  • Upgrade

Installation



Licensing and AD Integration

Install License and Integrate with AD:




Remove domain configuration:


Syslog Integration






Email Integration







IIS Crypto

IIS Crypto is a free tool that gives administrators the ability to enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows Server 2008, 2012, 2016 and 2019. It also lets you reorder SSL/TLS cipher suites offered by IIS, change advanced settings, implement Best Practices with a single click, create custom templates and test your website.



Backup & Restore

1 Backup - Admin -> See All ->  Backup Configuration




2 Important Files for Manual Backup

  • Database Folder
  • encryption.config - best practice is to put it into HSM
  • database.config - Encrypted

Database and app should have to be in same version , else you will get a notification

 3 Restore



Upgrade












YouTube Video for Upgrading Thycotic Secret Server.


No comments:

Post a Comment