Skip to main content

We currently support several existing K2 Blackpearl/Smarforms environments.  Each environment has its own set of service accounts that are used to run Windows Services and IIS application pools.  Our security engineering department has asked us if any of these service accounts can be converted to Group Managed Service Accounts (gMSAs).  Does K2 support using these service accounts to run services in K2 Blackpearl 4.7?

Hi,


From what I understand this isn't possible.


Kind regards,

Hendrix


Due to the nature of their password management, group managed service accounts are not currently supported in the K2 product.  As Windows is responsible for managing the passwords, K2 will have no context when the password is changed, and this can cause environmental issues throughout your K2 environment.


 


However, this seems like it would be a good candidate for a new feature request. Feel free to visit K2's ideas message board at ideas.k2.com and post your feature request.  If it receives enough attention, there is a chance it will be added to a future version of the K2 product.


 


If you find this solution to be helpful, please give it a "Kudo" by clicking on the thumbs up.  Thanks.


 


***Please note that K2 does not own solutions or necessarily endorse ideas presented on K2's Community board***


Reply