Solved

Does K2 Blackpearl version 4.7 support having gMSAs for service accounts?

  • 26 June 2019
  • 2 replies
  • 13 views

Badge +1

We currently support several existing K2 Blackpearl/Smarforms environments.  Each environment has its own set of service accounts that are used to run Windows Services and IIS application pools.  Our security engineering department has asked us if any of these service accounts can be converted to Group Managed Service Accounts (gMSAs).  Does K2 support using these service accounts to run services in K2 Blackpearl 4.7?

icon

Best answer by chruff1 5 July 2019, 17:33

View original

2 replies

Badge +3

Hi,


From what I understand this isn't possible.


Kind regards,

Hendrix

Due to the nature of their password management, group managed service accounts are not currently supported in the K2 product.  As Windows is responsible for managing the passwords, K2 will have no context when the password is changed, and this can cause environmental issues throughout your K2 environment.


 


However, this seems like it would be a good candidate for a new feature request. Feel free to visit K2's ideas message board at ideas.k2.com and post your feature request.  If it receives enough attention, there is a chance it will be added to a future version of the K2 product.


 


If you find this solution to be helpful, please give it a "Kudo" by clicking on the thumbs up.  Thanks.


 


***Please note that K2 does not own solutions or necessarily endorse ideas presented on K2's Community board***

Reply