Menu AuthGuardHelp centre
Portuguêsauthguard.pt

Administrators · Edge appliance

Edge appliance configuration and modules

  • 2 min read
  • SaaS · Self-hosted · Edge
  • Video
Tutorial 03Install the Edge appliance2:14 · Narrated in Portuguese, with English captions.Transcript and details

Each appliance has a numbered configuration, signed by the service and applied by the appliance at its next sync. Changing the configuration is a policy change: it is approved on your phone or with your passkey.

How do I change the configuration?

  1. Under «Operate» › «Edge appliances», choose «Configuration» on the appliance. «Appliance configuration» opens.
  2. Adjust:
FieldNotes
«Modules»«Privileged access» is the module available today
«Sync interval (seconds)»15 to 300
«Management networks (one CIDR per line)»Up to 16; the networks allowed to open the status page
«Require keys in hardware»Refuses appliances without a TPM
  1. Choose «Save configuration» and approve. The phone shows «Change the configuration of an Edge appliance», with the appliance, the revision replaced and the command digest.
  2. The console shows «Revision 4, applied 3» until the appliance applies the new revision.

If you do not approve: «Nothing was saved: the change was not approved.» With no saved configuration, the appliance runs its defaults.

Which modules are there?

ModuleStatus
«Privileged access» (pam)Available: recorded SSH sessions, web terminal, credential rotation
DirectoryNot available on the appliance yet
RADIUSNot available on the appliance yet; RADIUS is served by the central service

The console offers only the modules the appliance agent runs, so today the configuration shows only «Privileged access». A module saved earlier that the agent does not run stays in the configuration, hidden, and saving does not switch it off. A new module appears in the dialog once the appliance supports it.

Disable and enable

«Disable» stops the appliance working without retiring it; «Enable» allows it again. A disabled appliance only receives that instruction at its sync.

Errors

«Someone else changed this configuration. Reopen it.» and «Check the interval (15 to 300 seconds) and the networks (at most 16 CIDRs).»

Error codes in this article

Article referencead-edge-config-modulesquote it to support to identify this article. Checked against the product at commit 5f6607a8.