Sealed entries

0 vote

avatar

It would be good if you could seal entries, e.g. login informations.
So you can document an access, e.g. domain admin, database access or similar, without being able to see the content (username, password etc.). In an emergency, e.g. if something happens to the person who knows the access (accident, death), the seal can be broken by another person and thus obtain this information. However, selected users (other administrators, etc.) are immediately informed of the breaking of the seal by message (e-mail) and RDM will indicate that person X has broken the seal of entry Y.

This allows to document administrator accesses which must not be available to everyone from the beginning, unless there is an emergency.

Best regards
Sebastian Gohres

All Comments (18)

avatar

Hello,
It's a good idea. Do you use Devolutions Password Server or RDM with SQL Server?

Regards

David Hervieux

avatar

Hi,
yes, we're using RDM with MS SQL.

Best regards
Sebastian Gohres

avatar

Thank you for the information.

Regards

David Hervieux

avatar

I wanted to ask whether this request is on the agenda or has it been rejected

Best regards
Sebastian Gohres

avatar

Hello,
It's still on our todo list but I can't give you an ETA yet.

Regards

David Hervieux

avatar
avatar

Hi Folks,

Great feature to seal entries, we were really waiting for that kind of functionality in the remote desktop manager.
Just a few points to make it nearly perfect:

  • When we understood and tested correctly, the information that the item was unsealed is always sent to the administrator of the devolutions server. It would be useful to make this notification customizable, or at least send it to the vault admin or vault users. In our organization, every department has their vaults, and we cannot judge if there is an action needed when the seal is broken.
  • It would be useful to have a history for the seal events (creation, unsealed, sealed) so that you can see who, when and what has happened with the entry (like password history in the password item)


avatar

Hello,
I like your suggestions. I will let our development team know about it, and we will add it to our potential improvement list.

Regards

David Hervieux

avatar

@sam_urai Thanks for the feedback, concerning the logs I agree we should add them to the entry logs. In the meantime there is an "Entry unsealed" event that is generated in the Administration Logs report when an entry is unsealed.


Sébastien Duquette

avatar
Hello,
I like your suggestions. I will let our development team know about it, and we will add it to our potential improvement list.

Regards


Great to hear that. Looking forward to hearing, even when it's long term, about your realization plans with this one.

avatar
@sam_urai Thanks for the feedback, concerning the logs I agree we should add them to the entry logs. In the meantime there is an "Entry unsealed" event that is generated in the Administration Logs report when an entry is unsealed.


Thank you for your hint with the workaround so far. Entry logs would be great and more useful for "normal" users of course. Looking forward to see how this thing develops.

avatar

In DVLS 2025.1 logs will be added in the Entry logs when an entry is sealed and unsealed. I noted your request to make notifications customizable. Our planning for the next major version is still in preparation but we are considering bringing sealed entries to Hub.


Sébastien Duquette

avatar

I have a small request for a new feature.
Is it possible to display some metadatain the sealed entry?
We would like to see when and by whom it was sealed?


And is there any update on the request to make the notification customizable?

avatar

Hello,

Would knowing the last modified date and the user who last modified the entry be good enough for you? When an entry is sealed, it requires unsealing for any modification, so that information should represent who sealed the entry and when it was done.

For customizing the notifications, we haven't made progress on that end but we're noting your interest in the feature.

Regards,

Hubert Mireault

avatar

Hi Hubert,

thank you for the update.

Yes, user and last modified date would be great. Maybe the assigned Tags. But they are not so important since they are viewable in the overview of the folder.

Nice regards

avatar

Perfect, we will open a ticket and see about improving this.

Regards,

Hubert Mireault

avatar

Hello,
This will be added in RDM 2025.3.19.0, coming in the next few weeks.

Regards

David Hervieux

avatar

Hi @David Hervieux
"The next few weeks" -that was a good joke. It´s already been implemented for 12 days :D
https://forum.devolutions.net/topics/51414/version-20253200-october-24-2025

Thanks!