We have implemented a new level of password security now requiring 24 (ultra) complex passwords.
for each of our sites we have the sites passwords stored in Password Lists and we have several 100 password list with a comprehensive RBAC applied to the folder, connection password list and password within a password list.
How can I update these passwords most efficiently as I cant see a way to import new passwords into the existing password lists without losing most of the RBAC settings.
Latest version and Powershell are not possible in our current environment.
Hello DMOZ,
Thank you for reaching out to the Devolutions support team.
The way I see it, without PowerShell, is to use another vault to do the change.
Here is the step-by-step to execute these changes:
1- Create a new vault.
2- Clipboard copy and paste your password list entry into the new vault.
3- Right-click on this password list entry -> Edit -> Edit (special action)
4- Choose the extract credential option from the special edit action
5- Create folders to prepare a batch edit if you have credentials that will have the same credentials.
6- Do a batch edit on those folders by right-click -> Edit -> Batch-edit -> change saved credentials.
7- Select all your credentials entries and create a new password list.
8- Move it back to the main vault.
Best regards,
Patrick Ouimet
Thanks @Patrick Ouimet
I tried what you suggested, but when I execute
3- Right-click on this password list entry -> Edit -> Edit (special action)
4- Choose the extract credential option from the special edit action
I lose the ROLE assigned to each password in the password list.
Perhaps, I may have to go the powershell path.
Could you give me an example based on the following
RDM Connection: MS SQL | RDM SQL DB | MySQLUser | MySQLUserPWD
Entry: PasswordList1
Host: 127.0.0.1
User: Level1Support
domain: mydomain.com
pwd: Level1password!!2025
Description: My Main Site
Roles: Level1Support, Level2Support
Host: 127.0.0.1
User: Level3Support
domain: mydomain.com
pwd: Level3password!!2025
Description: My Main Site
Roles: Level3Support
need to update the pwd to be 24 complex
Hello DMOZ,
You can use the password template in RDM to update all the passwords at once.
# Adapt the data source name
$ds = Get-RDMDataSource -Name "<your data source name>"
Set-RDMCurrentDataSource $ds
$passwordlists = Get-RDMSession | Where-Object {$_.Name -eq "passwordlist1"}
foreach ($item in $passwordlists.Credentials.PasswordList){
$password = New-RDMRandomPassword -TemplateName passwordlist
$item.Password = $password
Set-RDMSession $passwordlists
}
Update-RDMUI
Best regards,
Patrick Ouimet
thanks - my previous attempts using the powershell modules always resulted in failed Datasource Connections.
However, can the above be translated into a block of code inside a "Custom Powershell Command" accessed via Edit-> Edit Special Actions (General)
i have tried the following per the prompted example to change the name of an entry and that worked but I am unsure of other available commands.
$connection.Name = "ModifiedName";
$RDM.Save();
as we have quite a number of sites and endpoint accounts to update i wanted to set up a scripted list to use at both ends.
Each site/account must be complex unique so i dont want to risk leaving us locked out during the transition
Hello DMOZ,
You can create a PowerShell local session entry in RDM and execute this script:
if(-not (Get-Module Devolutions.PowerShell -ListAvailable)){
Install-Module Devolutions.PowerShell -Scope CurrentUser
}
$passwordlists = Get-RDMSession | Where-Object {$_.Name -eq "passwordlist1"}
foreach ($item in $passwordlists.Credentials.PasswordList){
$password = New-RDMRandomPassword -TemplateName strong
$item.Password = $password
Set-RDMSession $passwordlists
}
Update-RDMUI
Note that you will have to load the RDM cmdlet to execute it.
Note that the PowerShell module has to match your RDM minor version.
https://www.powershellgallery.com/packages/Devolutions.PowerShell/2025.2.2
Best regards,
Patrick Ouimet