000012096 - What is the purpose of the nic_sshd and nic_sftp accounts?

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000012096
Applies ToenVision 3.5.x, 3.7.x, 4.0.0, 4.1.0
IssueWhat is the purpose of the nic_sshd and nic_sftp accounts?
You have seen these 2 accounts being created in active directory, you like to know their usage
Resolution

These accounts are used in Win_SSHD service. They were both used during the authentication process with the Win_SSHD server NIC_SSHD is used when a managed device uses SFTP to upload logs to enVision. NIC_SFTP is used when remote collectors forward logs from itself to D-Srv. The WIN_SSHD service is used to receive request from them.

Note that the Win_SSHD is configured to use public key for authentication, and these accounts and their passwords are used during the key exchange process in authentication

Legacy Article IDa45846

Attachments

    Outcomes