ACM applications¶
The ACM applications module declares the executables allowed to go through an ACM agent to obtain a password from the Bastion vault. An ACM contract may cover every executable, or only those declared here: this module therefore restricts the feature to a closed set of programs installed on the remote machines.
ACM availability
The ACM screen and its five modules only appear in the console when ACM is allowed: both a licence covering ACM and the Allow ACM usage option ticked for the organisation, in the system console are required.
Application list¶
| Column | Description |
|---|---|
| Executable name | Path of the executable on the machine where the agent is deployed. |
| Description | Free text. |
The search field filters on those two values. As long as no application is declared, the grid shows No applications.
The toolbar carries the three standard actions, whose tooltips are Add, Properties (single selection) and Delete (multiple selection allowed). Double-clicking is equivalent to Properties.
Add an application¶
Click +. The Add ACM application window opens.
| Field | Description |
|---|---|
| Executable name | Mandatory, unique. Absolute path on the target machine, for instance C:\Program Files\MyApplication\app.exe. Up to 2048 characters. |
| Description | Optional. Up to 256 characters. |
Click Validate.
Application already declared
If the executable is already present, the server refuses the addition with the message This application already exists.
Edit an application¶
Select a row then click the Properties icon (or double-click). The Edit ACM application window shows the same fields.
Delete an application¶
Select one or several rows then click ×. A confirmation is requested.
Application used by an ACM contract
An application that appears in an ACM contract cannot be deleted. Unused applications are deleted, and an error message lists the applications that were kept. To delete them, first remove them from those contracts.
An application may come from an import
Importing an ACM contract automatically creates the applications it names that do not exist yet — see ACM contracts.