Key-based auth for sail va collect

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

When I need to get logs from our VirtualAppliances, I use

sail va collect <IP1> <IP2>

Then I’m prompted for the password for the sailpoint account on those appliance VMs. I have key-based auth configured for the sailpoint account… Is there a way to have the sailpoint CLI use my key instead of having to look up the password every time?

Thanks,

Ian

2

Hello Ian,

Welcome to the SailPoint Developer Community.

Did some digging on this. Looks like sail va collect currently does not support SSH key-based authentication. Based on the CLI VA docs, the command only supports password auth for the sailpoint user via the -p flag (one per VA), so even if SSH key auth is configured on the appliance side, the CLI will not use it.

Practical workaround is to skip sail va collect and pull the files manually using native scp/sftp with your SSH key. You lose the built-in collection workflow and progress output, but unattended auth works fine that way.

Hope, this helps :slightly_smiling_face: