Introduction

In OpsRamp, credentials play a vital role for secure access and management of resources in your IT environment. Credentials are sets of authentication details like usernames, passwords, keys that are used to connect to various resources in your platform.

OpsRamp supports a wide range of credential types like Application, SNMP, VMware, Windows (WMI), Linux OS - Agentless (SSH), and Nutanix.

Configuration and management of credentials is essential for a secure connection across your infrastructure and proper monitoring of IT resources.

Prerequisites

To create a credential set with a password vault, there should be an installed Password Management integration, like Hashicorp, ManageEngine Password Manager.

Note: This feature is available only at the client level.

Create a credential

Follow these steps to create a credential:

  1. Click Setup > Account.

  2. From ACCOUNT DETAILS screen, click Credentials tile.

    Credentials screen

  3. Click +ADD.

    Create Credentials screen

  4. Enter the following information in CREDENTIALS screen:

    Mandatory fields

    CREDENTIALS

    Field NameField TypeDescription
    Credential TypeDropdownSelect credential type.
    Based on credential type selected, the input fields vary.
    NameStringProvide a name for the credential.
    DescriptionStringProvide a brief description about the credential.
    User NameStringEnter the User Name.
    PasswordStringEnter a strong password.
    PortIntegerEnter port number.
    Secure: Select this checkbox to enable secure connection.
    Connection Timeout (ms)IntegerEnter the connection time out.
    Example: 10000.
    Password Vault (Optional)CheckboxSelect the checkbox. The Integration and Policy Mapping dropdowns are displayed.
    All installed Password Management integrations are listed in the Integrations dropdown.
    1. Select integration from Integration dropdown.
    2. Select vault policy from Policy Mapping dropdown.
    Assigned ResourcesDropdownSelect resources from the dropdown.
    You can click ADVANCED SEARCH to search for resources.
    Select resources from resource list or click +QUERY to build a query using OpsQL.
    Note: You can select e maximum of 50 resources.

  5. Click SAVE. The credential is saved and listed on CREDENTIALS listing screen.

Follow these steps to configure credential types such as SNMP, Linux OS - Agentless (SSH), WINDOWS (WMI):

SNMP

For SNMP as credential type

  1. Enter the following information in CREDENTIALS screen:

    Field NameField TypeDescription
    Credential TypeDropdownSNMP
    NameStringProvide a name for the credential.
    DescriptionStringProvide a brief description about the credential.
    SNMP VersionDropdownSelect a version. Default is V1.
    Note: For Version V3, the input fields vary. Specify Context, Security Name, and Security Level.
    For more information, see SNMP field values.
    PortIntegerEnter the port number. Default is 161.
    For more information, see SNMP field values.
    CommunityStringEnter the community string. Default is public.
    Connection Timeout(ms)IntegerSpecify the connection timeout in milliseconds.
    Password Vault (Optional)CheckboxSelect the checkbox. The Integration and Policy Mapping dropdowns are displayed.
    All installed Password Management integrations are listed in the Integrations dropdown.
    1. Select integration from Integration dropdown.
    2. Select vault policy from Policy Mapping dropdown.
    Assigned ResourcesDropdownSelect resources from the dropdown.
    You can click ADVANCED SEARCH to search for resources.
    Select resources from resource list or click +QUERY to build a query using OpsQL.
    Create SNMP Credentials screen

  2. Click SAVE. The credential is saved and listed on CREDENTIALS listing screen.

Linux OS - Agentless (SSH)

For Linux OS - Agentless (SSH) as credential type

  1. Enter the following information in CREDENTIALS screen:

    Field NameField TypeDescription
    Credential TypeDropdownSSH
    NameStringProvide a name for the credential.
    DescriptionStringProvide a brief description about the credential.
    Authentication TypeDropdownPASSWORD or KEYPAIR types are available.
    For Password, enter username, password, and confirm password fields.
    For Keypair, enter username, upload a file through the Upload via file option or provide a link through the Already has a link option.
    SSH Key PassphraseStringEnter passphrase. To ensure that you have typed the correct passphrase, click the eye icon to view the passphrase that you entered.
    Confirm SSH Key PassphraseStringReenter the passphrase. To ensure that you have typed the correct passphrase, click the eye icon to view the passphrase that you entered.
    SecureCheckboxSelect this checkbox to enable secure connection.
    PortIntegerEnter the port number. Default is 22.
    Connection Timeout(ms)IntegerSpecify the connection timeout in milliseconds.
    Example: 10000
    Password Vault (Optional)CheckboxSelect the checkbox. The Integration and Policy Mapping dropdowns are displayed.
    All installed Password Management integrations are listed in the Integrations dropdown.
    1. Select integration from Integration dropdown.
    2. Select vault policy from Policy Mapping dropdown.
    Assigned ResourcesDropdownSelect resources from the dropdown.
    You can click ADVANCED SEARCH to search for resources.
    Select resources from resource list or click +QUERY to build a query using OpsQL.
    Create SSH Credentials screen

  2. Click SAVE. The credential is saved and listed in CREDENTIALS listing screen.

WINDOWS (WMI)

For Windows (WMI) as credential type

  1. Enter the following information in CREDENTIALS screen:

    Field NameField TypeDescription
    Credential TypeDropdownWINDOWS
    NameStringProvide a name for the credential.
    DescriptionStringProvide a brief description about the credential.
    Domain NameStringEnter domain name.
    Example: Administrator
    User NameStringEnter username.
    PasswordStringEnter the password. To ensure that you have typed the correct password, click the eye icon to view the password that you entered.
    Confirm PasswordStringReenter the password. To ensure that you have typed the correct password, click the eye icon to view the password that you entered
    Connection Timeout(ms)IntegerSpecify the connection timeout in milliseconds.
    Example: 10000
    Password Vault (Optional)CheckboxSelect the checkbox. The Integration and Policy Mapping dropdowns are displayed.
    All installed Password Management integrations are listed in the Integrations dropdown.
    1. Select integration from Integration dropdown.
    2. Select vault policy from Policy Mapping dropdown.
    Assigned ResourcesDropdownSelect resources from the dropdown.
    You can click ADVANCED SEARCH to search for resources.
    Select resources from resource list or click +QUERY to build a query using OpsQL.
    Create WMI Credentials screen

  2. Click SAVE. The credential is saved and listed in CREDENTIALS listing screen.


Similarly, configure credential set for other credential types like Application, CiscoUCS, Nutanix, VMware, XEN.

Manage credentials

You can perform the following actions on credentials.

ActionSteps
SearchTo search for a credential:
  1. Click the search icon in CREDENTIALS screen.
  2. Enter credential name in the search box.
The search result is displayed.
FilterYou can filter credentials by credential type:
  1. Click All Types dropdown in CREDENTIALS screen.
  2. Select credential type(s).
The filter result is displayed.
View and EditTo view or edit credential information:
  1. Search for the credential.
  2. Hover the mouse over the credential name and click action (three dots) icon.
  3. Select View.
  4. Make the required changes.
    5. Credential Type field is not editable.
  5. Click SAVE.
    6. The credential details are updated, and a confirmation message is displayed.
RemoveTo remove a credential:
  1. Search for the credential.
  2. Hover the mouse over the credential name and click action (three dots) icon.
  3. Select Remove.
  4. From the confirmation dialog box, click REMOVE.
    The credential is removed, and a confirmation message is displayed.