Windows Registry Strategy
This section explains how to change the values of subkeys defined in REGEDIT using Application Configuration and Trigger.
WinRM service must be installed on those servers.
While creating an Application Trigger Config using Windows Registry Config, the following values must be written in the Windows Registry Path field with ":\" at the end.
HKEY_CLASSES_ROOT : HKCR:\
HKEY_CURRENT_USER : HKCU:\
HKEY_LOCAL_MACHINE : HKLM:\
HKEY_USERS : HKU:\
HKEY_CURRENT_CONFIG : HKCC:\
For Example: The user wants to change PATH_NAME value with the Vault Account for the
SOFTWARE\DefaultUserEnvironment\SAPMTEST folder, the path information must be like the below:
HKLM:\SOFTWARE\DefaultUserEnvironment\SAPMTEST" -Name "PATH_NAME" -Value "
For this option, an Application Trigger Config definition must be made first.
- Navigate to Secrets > Configurations menu > Application Configuration Tab page.
- Click the +Add Button and Enter parameters.
As we explained in the above sections, when the user selects Strategy Type as Windows Register to WinRM method parameters will be shown on the screen as in Windows IIS App Pools, and Scheduled Task configurations. Users will enter the Windows Registry name, Port, and Authentication method as the same IIS and Scheduled Task definitions. When Windows Register is selected as the Strategy Type for the WinRM method, the parameters will be displayed on the screen as in Windows IIS App Pools and Scheduled Task configurations. The Windows Registry name, port, and authentication method must be entered in the same way as IIS and Scheduled Task definitions.
- Navigate to the Secrets >Application Management.
- Add a new trigger.
- Click the Add.
- A New Trigger Adding popup will appear.
There is a point to be considered when entering Windows Registry Path information.
While creating an Application Trigger using Windows Registry Config, the following values must be written in the Windows Registry Path field with “: \" at the end.
HKEY_CLASSES_ROOT : HKCR:\
HKEY_CURRENT_USER : HKCU:\
HKEY_LOCAL_MACHINE : HKLM:\
HKEY_USERS : HKU:\
HKEY_CURRENT_CONFIG : HKCC:\
- Enter the name of the trigger in the Name field.
- Select the Application Configuration with the defined name above the definition value like Windows Registry.
- In the Windows Registry Value Name field, the same value name defined in the Windows Registry editor must be entered. Otherwise, the password value will not change because the system will not find the relevant registry value.
- The Vault Account defined in Password Vault, whose password needs to be changed, must be selected.
If the user-defined for the Vault account is an authorized user to make changes on the Windows Registry, the Use Authentication User switch box is turned off. If it is not an authorized user, in this case, the Name and Password information of the Administrator user must be entered in the relevant fields.
- The Target Type value should be selected as Single Device.
- Device information where the Windows Registry is installed and the device to be modified must be selected.
- Click the Save button then the configuration will be completed.
After the definition is completed, the Vault screen must be opened, and the Vault account must be selected. Whenever the Vault account is selected and the 'Update' or 'Reset Password' option is clicked, a trigger will be created as explained in the previous sections, and a password change will be performed.
