Configuration Management

Deploy Pathfinder user, EPML client, and Portainer Agent via Ansible

S3 bucket not configured

Set ansible_s3_bucket in .env to enable Config Mgmt.

S3 Assets

All uploaded Missing assets

Checking S3…

Target Instances

No running EC2 instances found. Deploy one from the AWS tab first.

Name

Private IP

AMI

SSH User

Tasks to Run

Ansible jobs queued!

Each job runs the Ansible container in ECS. Track progress below.

View All Jobs

Create Pathfinder User

Runs make_pathfinder_user.sh — creates the Pathfinder user with BeyondTrust SSH cert auth

Install EPML Client

Installs epml-client.x86_64.rpm (Amazon Linux) or epml-client.amd64.deb (Ubuntu/Debian) from S3

Warning: one or more EPML packages are missing from S3. Upload them above first.

Activate EPML

Runs pbactivate -t "<token>" after installation

Activation Token *

Token is passed to pbactivate -t on each target instance.

Select at least one task to run.

Linux VMs

No running Linux VMs found. Start a VM from the VMs tab first.

	Name	IP	PS Account

Tasks to Run

Ansible jobs queued!

Each job runs Ansible via a local Docker container. Track progress below.

View All Jobs

Run OS Updates

apt full-upgrade (Ubuntu/Debian) · dnf update (Fedora/RHEL/Alma/Rocky) · zypper update (openSUSE)

Create Pathfinder User

Runs make_pathfinder_user.sh — creates the Pathfinder user with BeyondTrust SSH cert auth

Install EPML Client

Installs EPML from S3 (DEB for Ubuntu/Debian, RPM for RHEL/Amazon Linux)

Warning: one or more EPML packages missing from S3.

Activate EPML

Runs pbactivate -t "<token>" after installation

Activation Token *

Install Portainer Agent

Installs the Portainer Agent container and registers each VM as a Portainer endpoint

Portainer Workgroup

SSH Login User

Privilege Escalation

Windows VMs

Prerequisite: WinRM must be enabled on target Windows VMs

Run once on each target: winrm quickconfig -quiet

Windows VMs

No running Windows VMs found. Start a VM from the VMs tab first.

	Name	IP	PS Account

Windows Update

Windows Update jobs queued!

Each job runs Ansible via Docker (WinRM). Track progress below.

View All Jobs

Update Categories

Reboot if required

Reboots after updates if Windows requires it

WinRM Port

Target Azure VMs

No Azure VMs found. Deploy one from the Azure tab first.

	Name	State	OS	Target IP	SSH User
			not supported	⚠ No IP

Tasks to Run

Ansible jobs queued!

Each job runs Ansible via a local Docker container. Track progress below.

View All Jobs

Create Pathfinder User

Runs make_pathfinder_user.sh — creates the Pathfinder user with BeyondTrust SSH cert auth

Install EPML Client

Installs EPML from S3 (DEB for Ubuntu/Debian, RPM for RHEL)

Warning: one or more EPML packages are missing from S3. Upload them from the AWS tab first.

Activate EPML

Runs pbactivate -t "<token>" after installation

Activation Token *

Token is passed to pbactivate -t on each target VM.

Select at least one task to run.