Password Hub backup/restore and export features

Hi Nicola,

1. Deleted entries can be found in the reports section. The first button is to restore and the second to permanently delete the entry.
2. No, what would be the purpose of this snapshot? To compare, to restore?
3. In the upcoming version, we added a tool to generate a PowerShell script to export all shared vault entries as Json or CSV.

Have a good day!

1. Very good, haven't seen that, sorry.
2. Well yes, but I understand it is a quite extreme situation. The question would be "which backup policy do you apply to your SaaS?"
3. Will be a more simple export tool? We really need a simple xml/csv export for our local backup policy and we also need a printed version for the same purpose.

Thanks

Hi Nicola,

We do daily backups that are kept for 30 days. Those backups are for disaster recovery only. We also have data replication to a different data center in the same region.

The PowerShell script supports CSV and will contain all vaults. If it's to be printed, we can probably make a lightweight version; I will add that to the backlog.

Have a good day!

Having a native simple .CSV export (button and file download) and printing features (HTML/PDF with a super compact layout to not waste paper) would really be interesting.

Using RDM it seems already possible, right?

Hello Nicola,

You are correct! To export the content of your vault as a .CSV file, you will need to go under File -> Export -> Export Special -> Export Vault (.csv)

Best regards,

Ok, thanks.

I'm very happy there's a way to export. Is there a quick way to give an Application User Manager access to many vaults instead of having to go to each vaults settings and adding them in the Manager section? Perhaps a section that lets you Select All vaults, or just quickly checkmark vaults to give them access?

Hello,

If you have a manager group, you could add the application user to that group and ensure that this group is added to all vaults. If you don't have such a group, it's currently not possible. We have in our backlog a task to support default vault permissions which would be applied to all vaults, but that's currently only in the design phase. We will also take into consideration your suggestion to be able to assign a role to all vaults for a given user or group that's also interresting.

Have a good day!

Just to inform you that it is now possible to assign permission at all vaults at ones to a user , user group, or an Application user, See in Administration / System permission/ Vaults

Thanks you all.

Just to inform you that it is now possible to assign permission at all vaults at ones to a user , user group, or an Application user, See in Administration / System permission/ Vaults

Thanks you all.

That is great news. When using this new feature to give Manager access to our backup user to ALL vaults, running the script exports entries, but we get about 5-6 instances of this message in the script console output:

Line |
  28 |    $entries = Get-HubEntry -VaultId $vault.id
     |               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     | The api call with Hub failed. (Forbidden - Access denied)

I know the obvious answer would be access, but using this new assign user to all vaults as a manager was used. Any thoughts on what would cause this?

Hi superarash,

We are actually working on some bugs in PowerShell about this new feature. I'll keep you updated when the fix will be released.

Thank you for your comprehension.

Hi superarash,

Thanks for your patience. The fix is finally released with this new version 2021.12.13. Don't hesitate if you have any other questions.

Have a good day!

Hi superarash,

Thanks for your patience. The fix is finally released with this new version 2021.12.13. Don't hesitate if you have any other questions.

Have a good day!

I appreciate the update. When we do our periodic export, I will let you know if we run in to any issues.

Hi all
probably a future request : it is possibile to have also .RDM format in powershell v7 export script?
Regards

Hello,

That's already possible by using RDM's PowerShell module with Export-RDMSession. Here's some details about the module :
https://kb.devolutions.net/kb_rdmpowershellcore.html

You will need to create an application user in Hub and assign the correct permissions too.

Have a good day!

Hi Maxime,
that's right!

how i can find some example? my goal is to export all PasswordHub vaults in rdm format, from rdm
I have exported all vaults in json format with PasswordHub scripts

Thank you in advance!

Regards

Hello,

We have some example scripts for our RemoteDesktopManager PowerShell module located on our github here: https://github.com/Devolutions/RDMSamples-ps

For the export all entries in all vaults, you could try the following:

#The following script will export all entries from all vaults as one file per vault. Each file is password protected.
	

	Import-Module RemoteDesktopManager
	

	# Adapt the data source name
	$ds = Get-RDMDataSource -Name "NameOfYourDataSourceHere"
	Set-RDMCurrentDataSource $ds
	

	# Adapt the password
	$passwd = ConvertTo-SecureString -AsPlainText -Force 'mypassword'
	

	$repos = Get-RDMRepository
	

	foreach ($repo in $repos)
	{
	    Set-RDMCurrentRepository $repo
	    Update-RDMUI
	

	    $sessions = Get-RDMSession
	    $reponame = $repo.name
	

	    # Adapt the destination path for file(s)
	    Export-RDMSession -Path "C:\temp\Sessions_$reponame.rdm" -Sessions $sessions -IncludeCredentials -XML -Password $passwd
	}

Please let me know if you have questions.

Best regards,

Hi Eric,
it works as espected! 😃

Thank you very much

Out of curiosity, if there were some catastrophic data loss event and we needed to restore all our vaults to a new Password Vault Business instance, is it better to:

• Have exported vaults in .json format to import back into the new PVB instance?

• Have exported vaults in .RDM format to load as a data source in RDM, and load into a new PVB instance?

Hello,

It'll come down to where you are importing the vaults and if you plan on moving them to other products.

.rdm files can be imported in all of our products.
Note: Presently Password Hub Business doesn't have this feature implement directly yet but imports can be done when used in conjunction with our Password Hub Importer:
https://devolutions.net/password-hub-importer

.json files are importable by Remote Desktop Manager. ".json" also have a higher chance of being available with other products outside of Devolutions.

Please let me know if you have any questions.

Best regards,

Thank you for the clarification. Are .json files imported to a PHB instance using the Password Hub Importer as well? If not, how would they be imported?

Hello,

The importer only works with .rdm and .pvm files.
With .json files it would need to be imported via an RDM that is connected to your Password Hub.

Best regards,
Eric