IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

How to specify a pem file in a Playbook

  • 1.  How to specify a pem file in a Playbook

    Posted Mon June 24, 2024 12:27 AM

    Hello, everyone

    The customer's QRadar SOAR is currently deployed on AWS.

    As you know AWS EC2 uses pem to access servers.

    The customer wants to be able to send commands to a server and receive results using a playbook in the app called "fn_network_utilities".

    Here's the problem.

    You need to construct a playbook. You need to specify a pem file for "network_utilities_remote_computer", but it is not listed in the official documentation or community.

    I tried looking for a way, but I just get an error message and the command doesn't run. However, the playbook terminates normally.

    The error message saying it failed is:
    Command failed: whoami
    Standard Out: None
    Standard Error: Bad authentication type; allowed types: ['publickey', 'gssapi-keyex', 'gssapi-with-mic']

    I would like to ask if there is a solution.

    Thank you and best regards.



    ------------------------------
    Yongwon Song
    ------------------------------