Configuration Management

Deploy Pathfinder user, EPML client, and Portainer Agent via Ansible

S3 bucket not configured

Set ansible_s3_bucket in .env to enable Config Mgmt.

S3 Assets

All uploaded Missing assets

Checking S3…

Target Instances

No running EC2 instances found. Deploy one from the AWS tab first.

Name

Private IP

AMI

SSH User

Tasks to Run

Ansible jobs queued!

Each job runs the Ansible container in ECS. Track progress below.

View All Jobs

Create Pathfinder User

Runs make_pathfinder_user.sh — creates the Pathfinder user with BeyondTrust SSH cert auth

Install EPML Client

Installs epml-client.x86_64.rpm (Amazon Linux) or epml-client.amd64.deb (Ubuntu/Debian) from S3

Warning: one or more EPML packages are missing from S3. Upload them above first.

Activate EPML

Runs pbactivate -t "<token>" after installation

Activation Token *

Token is passed to pbactivate -t on each target instance.

Select at least one task to run.

Configure Local Linux VM

Select a VM, choose tasks, and run — credentials fetched from Password Safe.

Done!

View Job

Tasks to Run

Create Pathfinder User

Runs make_pathfinder_user.sh — creates the Pathfinder user with BeyondTrust SSH cert auth

Install EPML Client

Installs EPML from S3 (DEB for Ubuntu/Debian, RPM for RHEL/Amazon Linux)

Warning: one or more EPML packages are missing from S3. Upload them from the AWS tab first.

Activate EPML

Runs pbactivate -t "<token>" after installation

Activation Token *

Install Portainer Agent

Installs the Portainer Agent container and registers the VM as an endpoint in Portainer

Portainer Workgroup

Strip Desktop (Convert to Server)

SSHes in, removes the desktop environment, and reboots. Adds ~5–10 min.

OS Family *

The VM will be rebooted after desktop removal.

Select at least one task to run.

SSH Login User

Privilege Escalation

Local Linux VM

Password Safe Account Looking up managed accounts…

No managed accounts found in Password Safe for this VM. Will use the osboxes secret as the SSH password.

Target Azure VMs

No Azure VMs found. Deploy one from the Azure tab first.

	Name	State	OS	Target IP	SSH User
			not supported	⚠ No IP

Tasks to Run

Ansible jobs queued!

Each job runs Ansible via a local Docker container. Track progress below.

View All Jobs

Create Pathfinder User

Runs make_pathfinder_user.sh — creates the Pathfinder user with BeyondTrust SSH cert auth

Install EPML Client

Installs EPML from S3 (DEB for Ubuntu/Debian, RPM for RHEL)

Warning: one or more EPML packages are missing from S3. Upload them from the AWS tab first.

Activate EPML

Runs pbactivate -t "<token>" after installation

Activation Token *

Token is passed to pbactivate -t on each target VM.

Select at least one task to run.