Secret Assistant - Help

Getting Started

  1. Download the secretassistant.zip
  2. Unzip it into its own folder (2 files: secretassistant.exe, Microsoft.mshtml.dll)
  3. Double click the secretassistant.exe to start Secret Assistant
  4. The login dialog will open: Enter the URL for your Secret Server, your Secret Server username and password (Secret Assistant sends your login information to your Secret Server to confirm your identity)
  5. Secret Assistant will now minimuze to the System Tray
  6. Browse to a website in Internet Explorer (choose a website that your have Web Password for in your Secret Server)
  7. Browse to the login page of that website, if the URL of the login page matches your secret's URL exactly then a balloon popup will appear above the System Tray
  8. Clicking the balloon popup will cause Secret Assistant to attempt to login to the website. Secret Assistant uses Site Definition and Site Guessing to identify the correct login form elements to populate
  9. If Secret Assistant is unable to identify the login form elements, then a dialog will appear with "Copy and Paste" images to copy over the login information the login form.

Troubleshooting

Why didn't it show a balloon popup for my website?

Check that your secret in Secret Server is a Web Password. Check that the URL field value in your secret matches the website login URL exactly.

Why didn't it automatically log me in when I clicked the balloon?

Sometimes the Secret Assistant is not able to automatically find the website login page form elements. This is either due to a missing SiteDefinition file (this is an XML file that can be placed on the website or on the Thycotic Updates website - it defines the login URL and the form element names). If there is no SiteDefinition file then the Secret Assistant will attempt to guess the right form elements to populate. If this still does not succeed, then a dialog is presented with the secret username and password to be copied into the login form.

Is there a log file that I can turn on?

Yes. Logging in to Secret Assistant once will create a configuration file (usersettings.xml). Open this file in notepad and change the EnableLogging element to true - then restart Secret Assistant and you will see a new log file is created in the same directory as the executable.

How do I stop the "Do you want to run this file?" dialog every time I start Secret Assistant?

This is a Windows protection feature since the Secret Assistant was downloaded to your computer. Simply right click on the secretassistant.exe file, choose "Properties", then click the "Unblock" button.

What is a SiteDefinition file? (secretserver.xml)

These files are used to tell the Secret Assistant the login URL and the names of the login form elements so it can successfully log you into a website by knowing how to complete the login form. These files have the following typical structure: 
<?xml version="1.0" encoding="utf-8" ?>
<secretserver>
<logins>
<login>
<url>http://slashdot.org/users.pl</url>
<usernameinput>unickname</usernameinput>
<passwordinput>upasswd</passwordinput>
<logininput>userlogin</logininput>
</login>
</logins>
</secretserver>
(the above file shows the mapping for the popular tech website SlashDot.org)

The Secret Assistant will first try to find this Site Definition file at http://www.slashdot.org/secretserver.xml; if it cannot find it at this location then it will fail over to the Thycotic Updates website to get the correct file if it exists.

How can I get help or report a website that doesn't work?

Please contact us using our Support Email (we respond best to email but are happy to talk by phone too).

Why am I getting this error "The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel"?

When you receive this message please verify that the URL of your Secret Server installation is correct. You may also need to add a certificate if Secret Server is not on your trusted sites.
Please refer to our Secret Assistant SSL Video for a demonstration of how to install an SSL Certificate.





Copyright © 2007. Thycotic Software Ltd.