Sync Agents

Passly (AuthAnvil) > Password Server > Sync Agents

Sync Agents are deployed to machines. They communicate with Password Server to synchronize the passwords stored in vaults with the passwords stored on the machines, based on vault policy. Each day Password Server verifies that all synchronized password records are still in sync with respective Windows user accounts.

Sync agents are configured to work with four general categories of passwords:

• Web Passwords on Forms-Based Websites
• Windows Passwords
• Windows Task Scheduler Passwords
• Windows Service Accounts Passwords

Additional guidelines:

• See Sync Scenarios for more details about synchronizing types of passwords.
• Passwords for Windows Scheduled Tasks and Windows Services can also be synchronized using Sync Chains.
• Sync agents should be installed on domain member servers rather than domain controllers.
• If installing in a non-domain environment, installing on a server with full network visibility is sufficient.
• For Standalone Windows Passwords, the sync agent must be on the same machine as the password being synchronized.
• For Remote Windows Passwords, the sync agent simply has to be on the same network as the target machine, but it requires an elevated Linked Credential to connect to the target machine. Active Directory Windows Passwords just need to be on a domain member machine.
• For Remote Windows Passwords, the target machine's firewall must have the appropriate ports open for remote management via WMI, as described in this MSDN article and, if it is running Windows Vista or later, must have the LocalAccountTokenFilterPolicy set as described in this Microsoft KB article.
• For Windows Service Passwords, you must use the Service Name of the service rather than the Display Name. Right-click the service and go to Properties to verify the Service Name.
• For any sync agents that synchronize passwords on remote machines, the machines must be online and available on the network. Otherwise the sync test will fail, and the password will be marked as Out of Sync.

Deployment

1. Download the Sync Agent install zip from the Sync Agents page.
2. Copy the zip to the target machine you want to install it on.
3. Extract the contents of the zip.
4. Run the .msi in the same directory as your unique configuration file.
5. Follow the on-screen instructions, and complete the installation.
6. Run the Sync Agent Configuration form with elevated privileges.
   • Confirm your Password Server URL.
   • Make note of the Trust Verification Code (TVC)
   • Save the settings to start the service.

Note: For more information, see How do I deploy a Sync Agent.

Approval

1. Use the Sync Agents page to approve sync agents in the Pending list.
2. Confirm the TVC code to ensure you only approve authorized sync agents.
3. Provide the agent a name and select its scopes.

You can now navigate to the Vaults > (vault) > (password) > Synchronize tab to select the sync agent and assign it to a password.