IBM Security QRadar SOAR

 View Only

How to specify a pem file in a Playbook

  • 1.  How to specify a pem file in a Playbook

    Posted 11 days ago

    Hello, everyone

    The customer's QRadar SOAR is currently deployed on AWS.

    As you know AWS EC2 uses pem to access servers.

    The customer wants to be able to send commands to a server and receive results using a playbook in the app called "fn_network_utilities".

    Here's the problem.

    You need to construct a playbook. You need to specify a pem file for "network_utilities_remote_computer", but it is not listed in the official documentation or community.

    I tried looking for a way, but I just get an error message and the command doesn't run. However, the playbook terminates normally.

    The error message saying it failed is:
    Command failed: whoami
    Standard Out: None
    Standard Error: Bad authentication type; allowed types: ['publickey', 'gssapi-keyex', 'gssapi-with-mic']

    I would like to ask if there is a solution.

    Thank you and best regards.



    ------------------------------
    Yongwon Song
    ------------------------------