Introduction

In OpsRamp, credentials play a vital role for secure access and management of resources in your IT environment. Credentials are sets of authentication details like usernames, passwords, keys that are used to connect to various resources in your platform.

OpsRamp supports a wide range of credential types like Application, SNMP, VMware, Windows (WMI), Linux OS - Agentless (SSH), and Nutanix.

Configuration and management of credentials is essential for a secure connection across your infrastructure and proper monitoring of IT resources.

Prerequisites

To create a credential set with a password vault, there should be an installed Password Management integration, like Hashicorp, ManageEngine Password Manager.

Note: This feature is available only at the client level.

Create a credential

Follow these steps to create a credential:

  1. Click Setup → Account.

  2. From Account Details screen, click Credentials tile.

    Credentials screen

  3. Click +ADD. The ADD CREDENTIAL screen is displayed.

    Create Credentials screen

  4. Enter the following information:

    Mandatory fields

    CREDENTIALS

    Field NameField TypeDescription
    Credential TypeDropdownSelect credential type as APPLICATION.
    Based on credential type selected, the input fields vary.
    NameStringProvide a name for the credential.
    DescriptionStringProvide a brief description about the credential.
    User NameStringEnter the User Name.
    Password Vault (Optional)CheckboxSelect the checkbox. The Integrations and Policy Mapping dropdowns are displayed.
    All installed Password Management integrations are listed in the Integrations dropdown.
    1. Select integration from Integration dropdown.
    2. Select vault policy from Policy Mapping dropdown.
    PasswordStringEnter a strong password.
    Confirm PasswordStringReenter the password.
    PortIntegerEnter port number.
    Connection Timeout (ms)IntegerEnter the connection timeout.
    Example: 10000.
  5. Click SAVE. The credential is saved and listed on CREDENTIALS listing screen.

Follow these steps to configure credential types such as SNMP, Linux OS - Agentless (SSH), WINDOWS (WMI):

SNMP

For SNMP as credential type
  1. Enter the following information in CREDENTIALS screen:

    Field NameField TypeDescription
    Credential TypeDropdownSNMP
    NameStringProvide a name for the credential.
    DescriptionStringProvide a brief description about the credential.
    SNMP VersionDropdownSelect a version. Default is V1.
    Note: For Version V3, the input fields vary. Specify Context, Security Name, and Security Level.
    For more information, see SNMP field values.
    PortIntegerEnter the port number. Default is 161.
    For more information, see SNMP field values.
    CommunityStringEnter the community string. Default is public.
    Password Vault (Optional)CheckboxSelect the checkbox. The Integration and Policy Mapping dropdowns are displayed.
    All installed Password Management integrations are listed in the Integrations dropdown.
    1. Select integration from Integration dropdown.
    2. Select vault policy from Policy Mapping dropdown.
    Connection Timeout(ms)IntegerSpecify the connection timeout in milliseconds.

    Create SNMP Credentials screen
  2. Click SAVE. The credential is saved and listed on CREDENTIALS listing screen.

Linux OS - Agentless (SSH)

For Linux OS - Agentless (SSH) as credential type
  1. Enter the following information in CREDENTIALS screen:

    Field NameField TypeDescription
    Credential TypeDropdownSSH
    NameStringProvide a name for the credential.
    DescriptionStringProvide a brief description about the credential.
    Authentication TypeDropdownPASSWORD or KEYPAIR types are available.
    For PASSWORD:
    1. Enter username, password, and reenter password in the User Name, Password, and Confirm Password fields.
    For KEYPAIR:
    1. Enter username in the User Name field.
    2. Upload a file through the Upload via file option or provide a link through the Already has a link option.
    3. Enter passphrase in the SSH Key Passphrase field.
      To ensure that you have typed the correct passphrase, click the eye icon to view the passphrase that you entered.
    4. Reenter the passphrase in Confirm SSH Key Passphrase field.
      To ensure that you have typed the correct passphrase, click the eye icon to view the passphrase that you entered.
    Password Vault (Optional)CheckboxSelect the checkbox. The Integration and Policy Mapping dropdowns are displayed.
    All installed Password Management integrations are listed in the Integrations dropdown.
    1. Select integration from Integration dropdown.
    2. Select vault policy from Policy Mapping dropdown.
    SecureCheckboxSelect this checkbox to enable secure connection.
    PortIntegerEnter the port number. Default is 22.
    Connection Timeout(ms)IntegerSpecify the connection timeout in milliseconds.
    Example: 10000
    Create SSH Credentials screen
  2. Click SAVE. The credential is saved and listed in CREDENTIALS listing screen.

WINDOWS (WMI)

For Windows (WMI) as credential type
  1. Enter the following information in CREDENTIALS screen:

    Field NameField TypeDescription
    Credential TypeDropdownWINDOWS
    NameStringProvide a name for the credential.
    DescriptionStringProvide a brief description about the credential.
    Domain NameStringEnter domain name.
    Example: Administrator
    User NameStringEnter username.
    Password Vault (Optional)CheckboxSelect the checkbox. The Integration and Policy Mapping dropdowns are displayed.
    All installed Password Management integrations are listed in the Integrations dropdown.
    1. Select integration from Integration dropdown.
    2. Select vault policy from Policy Mapping dropdown.
    PasswordStringEnter the password. To ensure that you have typed the correct password, click the eye icon to view the password that you entered.
    Confirm PasswordStringReenter the password. To ensure that you have typed the correct password, click the eye icon to view the password that you entered
    Connection Timeout(ms)IntegerSpecify the connection timeout in milliseconds.
    Example: 10000
    Create WMI Credentials screen
  2. Click SAVE. The credential is saved and listed in CREDENTIALS listing screen.


Similarly, configure credential set for other credential types like Application, CiscoUCS, Nutanix, VMware, XEN.

Manage credentials

Follow these steps to navigate to the CREDENTIALS listing screen:

  1. Click Setup → Account.

  2. From Account Details screen, click Credentials tile. The CREDENTIALS listing screen is displayed.

    Credentials screen

You can perform the following actions:

ActionSteps
SearchTo search for a credential:
  1. Click the search icon in CREDENTIALS screen.
  2. Enter credential name in the search box.
The search result is displayed.
FilterYou can filter credentials by credential type:
  1. Click All Types dropdown in CREDENTIALS screen.
  2. Select credential type(s).
The filter result is displayed.
View and EditTo view or edit credential information:
  1. Search for the credential.
  2. Hover the mouse over the credential name and click action (three dots) icon.
  3. Select View.
  4. Make the required changes.
  5. Credential Type field is not editable.
  6. Click SAVE.
  7. The credential details are updated, and a confirmation message is displayed.
Copy CredentialsNote:
  • This option is visible only if the Show Copy Clipboard option is enabled in Account Settings of the client.
  • You should have "View Credential" permission to copy the credentials.
To copy a credential:
  1. Search for the credential.
  2. Hover the mouse over the credential name and click action (three dots) icon.
  3. Select Copy Credentials. The credentials are copied to the clipboard and a confirmation message appears.
  • If Two-Factor authentication is enabled, you have to enter the code or key (based on the authentication methods) to validate the authentication. After successful validation, the credential is copied.
    A confirmation message appears.
Unassign resourcesTo unassign resource(s) from a credential:
  1. Search for the credential.
  2. Click the number in the Resources column to view the list of resources assigned to the credential.
    The ASSIGNED RESOURCES window is displayed.

    Assigned resources window
  3. Search for the resource and select the checkbox next to it.
    You can also select the resources directly in the window.
  4. Click UNASSIGN RESOURCES. The resource is unassigned and a confirmation message appears.
RemoveTo remove a credential:
  1. Search for the credential.
  2. Hover the mouse over the credential name and click action (three dots) icon.
  3. Select Remove.
  4. From the confirmation dialog box, click REMOVE.
    The credential is removed, and a confirmation message is displayed.