superarash

Hello,

Using the GUI of RDM, it is only possible to export one vault at a time. The feature to do it for all vaults at once is planned for the 2022.2 release, which should release end of Q2.

In the meantime, it could be performed with PowerShell scripts:

• Entries: https://github.com/Devolutions/RDMSamples-ps/blob/main/module/export/ExportAllEntriesAllVaults.ps1

• Attachments and documents: https://github.com/Devolutions/RDMSamples-ps/blob/main/module/export/ExportDocumentsDatabase.ps1

Best regards,

That's good news. We are already using the export scripts and I'm looking forward to doing this in RDM as well.

We'd like to export all of the vaults in our PVB instance using RDM. Is this possible? Or do we have to go one by one and export each vault? There are many vaults so I am hoping there is a way to export the entire PVB instance including all vaults/attachments etc.

Each time we tried to follow the steps given above, the problem would disappear. The problem however hasn't occurred for about a week, so I believe it has been resolved. We did not do anything different on our end. It just started working as expected.

In the past we have been able to go directly to the address:

<our password business hub>.devolutions.app

Enter our username, password 2fa and get into our Hub with all of our vaults listed.

Recently there has been a 50/50 chance that going to our Business Vault address instead takes us to our Devolutions Profile Page. However as of today, every time we go to our hub address, it ONLY takes us to our profile page instead of our hub with vaults.

I have to manually navigate to Password Hub Business in the left nav menu, then click on our hub, it prompts for 2fa, and even then sometimes it just goes back to the profile page.

We've tried incognito and clearing cookies. The rest of our team has reported this behavior as well.

We have not examined the contents of the individual vault files generated by the export script at this time as there are many vaults and many entries per vault.

Let me know if there's any details you would need from us.

Hello,

While using the csv export script and JSON export script today provided by Devolutions in the Password Vault Managed Business Tools section, I came across this error about 5-7 times while the script is running. All entries seem to export however...:

Get-HubEntry: J:\export-vaults-powershell-module-script-CSV.ps1:28
Line |
  28 |    $entries = Get-HubEntry -VaultId $vault.id
     |               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     | The api call with Hub failed. (Forbidden - Access denied)

I have confirmed our application user/key has full managed access to every vault in our instance. This error occurred in the CSV and JSON export scripts. I have confirmed we have the latest Devolutions.Hub powershell module.

Thank you for the clarification. Are .json files imported to a PHB instance using the Password Hub Importer as well? If not, how would they be imported?

Out of curiosity, if there were some catastrophic data loss event and we needed to restore all our vaults to a new Password Vault Business instance, is it better to:

• Have exported vaults in .json format to import back into the new PVB instance?

• Have exported vaults in .RDM format to load as a data source in RDM, and load into a new PVB instance?

Hi superarash,

Thanks for your patience. The fix is finally released with this new version 2021.12.13. Don't hesitate if you have any other questions.

Have a good day!

I appreciate the update. When we do our periodic export, I will let you know if we run in to any issues.

Just to inform you that it is now possible to assign permission at all vaults at ones to a user , user group, or an Application user, See in Administration / System permission/ Vaults

Thanks you all.

That is great news. When using this new feature to give Manager access to our backup user to ALL vaults, running the script exports entries, but we get about 5-6 instances of this message in the script console output:

Line |
  28 |    $entries = Get-HubEntry -VaultId $vault.id
     |               ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     | The api call with Hub failed. (Forbidden - Access denied)

I know the obvious answer would be access, but using this new assign user to all vaults as a manager was used. Any thoughts on what would cause this?

Hello,

While testing out the csv export script recently provided by Devolutions in the Password Vault Managed Business Tools section, I came across this error:

ConvertTo-HubFlatObject: C:\Users\user\Desktop\script\export-vaults-powershell-module-script-csv.ps1:30
Line |
  30 |    $entries | ConvertTo-HubFlatObject | Export-CSV $filepath
     |               ~~~~~~~~~~~~~~~~~~~~~~~
     | The term 'ConvertTo-HubFlatObject' is not recognized as a name of a cmdlet, function, script file, or executable program. Check the spelling of the name, or if a path was
     | included, verify that the path is correct and try again.

I confirmed I have the right module installed:

PS C:\Users\user\Desktop\script> Find-Module -Name Devolutions.Hub

Version              Name                                Repository           Description
-------              ----                                ----------           -----------
2021.9.30            Devolutions.Hub                     PSGallery            Devolutions Password Hub PowerShell Module

Then I tried searching for the function in the error above in the Devolutions.Hub module:

PS C:\Users\user\Desktop\script> Find-Command -Name ConvertTo-HubFlatObject -ModuleName Devolutions.Hub
Find-Package: C:\program files\powershell\7\Modules\PowerShellGet\PSModule.psm1:8879
Line |
8879 |          PackageManagement\Find-Package @PSBoundParameters | Microsoft …
     |          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     | No match was found for the specified search criteria and module name 'Devolutions.Hub'. Try Get-PSRepository to see all available registered module repositories.

And it looks like the ConvertTo-HubFlatObject is missing from the Devolutions.Hub module in the PS Gallery. Is this something that needs to be corrected on the Devolutions side in the module? I can confirm the JSON version of the script works just fine.

Hello,

I would just like to ammend this statement.

I contacted Devolutions support a couple months ago and they said they were not making backups of our Password Hub Business instance/vaults, which was very concerning.

We do backup data, but it's not to be used directly by our users. Those backups are for disaster recovery such as to a failure in Azure, an employee error (deletion of the storage) or a natural disaster. Furthermore, not only we do backups in a different data center of the same country, we also replicate data to a different region in the same country. If the main region is down for some reason, the replication region can take over.

Hope this clarifies, have a good day!

Thank you for clarifying!

I'm very happy there's a way to export. Is there a quick way to give an Application User Manager access to many vaults instead of having to go to each vaults settings and adding them in the Manager section? Perhaps a section that lets you Select All vaults, or just quickly checkmark vaults to give them access?

Clearly I should have read the forum a bit before posting this. The post right below mine addresses this. For Reference:

https://forum.devolutions.net/topics/36180/password-hub-backuprestore-and-export-features

Hello All,

In following IT best practices, what are users doing to backup their Password Hub Business vaults in case of catastrophic data loss? I contacted Devolutions support a couple months ago and they said they were not making backups of our Password Hub Business instance/vaults, which was very concerning. Their solution was to get a trial license of RDM and export the vaults one by one. But that just seems too manual of a solution especially when there could be many many vaults for various organizations. Also, making a cold storage backup once or twice a year when the RDM trial license expires after a week or two just seems clunky.

Has anyone found a best practice to backup their Password Hub Business instance? I'm sure we aren't the only ones thinking about this.

Hi, in the next version of the iOS app, this problem will be fixed. The release will be available very soon! Thank you for your feedback.

I'm glad to hear that. Will the iOS app be fixed so that Documentation of an entry is shown? We currently utilize the Documentation section of an entry heavily, but aren't given a Documentation button on the iOS app on password entries.

Hello,

When vaults are added to our account, they show in the order they were added and not in alphabetical order. This makes it difficult if you are looking for a vault which you know the name of but have to scroll and hunt for the name. This is a problem on the iOS Password Hub vault as well. For example some places the names are not in order:

When moving a password entry and bring presented with the list of vaults to move to

Listing the vaults in the iOS drop down at the top

Thanks!

It may be overwhelming to send all notifications to the admin. Other services send it directly to the user which makes more sense.

Glad to hear whitelisting is on the roadmap!

In the original PVM desktop if you were using the Azure SQL datasource, we could use the Azure firewall settings to only allow connections to our PVM source from specific IPs. This whitelisting of IPs was a tremendous security benefit.

Now that PVM desktop has been retired, there is no easy way to restrict IPs without having some sort of fallback in case you need access from a non-white listed IP.

In lieu of whitelisting IPs, PVM Hub should have an email notification when a user is logged in from a new device or a new location. Box already does this as a part of their security practice and since such highly sensitive information is kept in the PVM Hub this feature should be added as well since whitelisting is not available.

I can confirm this feature is now there and working. Great improvement!

Does that mean we need to pay for and maintain an RDM license on top of what we are paying for the PVM Hub?

Does that mean we will need to have a RDM license and add our PVM Hub DB to RDM just to do an export of a single vault?

Glad to hear it. I also noticed the iOS app doesn't include the Description/Documentation field of a PVM Hub entry. Will this be added as well in the update?

We are getting ramped up with the PVM Hub applications and noticed we are unable to highlight or copy any text in the iOS application from the username or password fields. Occasionally we will need to share information from the PVM Hub while we are remote and being able to quickly grab a login from the iOS app and paste it into chat or transmit it securely has been a big help.

Are there plans to allow text selection/copying in the iOS/Android apps?

So for example in the desktop PVM you could select a folder or number of entries, right click -> Export -> Export Special -> HTML. This would produce a nicely laid out zip encrypted HTML file that also had an encryption password to reveal the password for each entry. Even a simple layout like this would be much better than raw data in a JSON file. I've attached a screenshot example of the HTML export format.