sdm admin servers clone

NAME:
   sdm admin servers clone - create a new server using an existing server as a template

USAGE:
   sdm admin servers clone command [command options] [arguments...]

COMMANDS:
   rawtcp                                         clone TCP server
   rdp                                            clone RDP server
   rdp-cert, rdpCert                              clone RDP (Certificate Based) server
   ssh                                            clone SSH (Public Key) server
   ssh-cert, sshCert                              clone SSH (Certificate Based) server
   ssh-cert-user-provision, sshCertUserProvision  clone SSH (Certificate Based with User Provisioning) server
   ssh-customer-key                               clone SSH (Customer Managed Key) server
   sshPassword                                    clone SSH (Password) server

OPTIONS:
   --help, -h  show help

rawtcp

NAME:
   sdm admin servers clone rawtcp - clone TCP server

USAGE:
   sdm admin servers clone rawtcp [command options] <ID>

OPTIONS:
   --delete-all-tags      
   --delete-tags value    delete-tags e.g. 'key,...'
   --egress-filter value  apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
   --hostname value       The traffic content is not recorded.
   --name value           datasource name
   --port value           (default: 0)
   --port-override value  port profile override (default: -1)
   --tags value           tags e.g. 'key=value,...'

rdp

NAME:
   sdm admin servers clone rdp - clone RDP server

USAGE:
   sdm admin servers clone rdp [command options] <ID>

OPTIONS:
   --delete-all-tags            
   --delete-tags value          delete-tags e.g. 'key,...'
   --downgrade-nla-connections  Note: when downgraded, StrongDM cannot verify usernames and passwords for Remote Desktop connections
   --egress-filter value        apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
   --hostname value             
   --name value                 datasource name
   --password value             (secret)
   --port value                 (default: 0)
   --port-override value        port profile override (default: -1)
   --tags value                 tags e.g. 'key=value,...'
   --username value             (secret)

rdp-cert

NAME:
   sdm admin servers clone rdp-cert - clone RDP (Certificate Based) server

USAGE:
   sdm admin servers clone rdp-cert [command options] <ID>

OPTIONS:
   --bind-interface value                       IP address on which to listen for connections to this resource on clients. Specify "default", "loopback", or "vnm" to automatically allocate an available address from the corresponding IP range configured in the organization. (default: "default")
   --dc-hostnames value                         Comma-separated list of Active Directory Domain Controller hostnames for LDAPS SID resolution. Utilized for strong certificate mapping in full enforcement mode when the identity alias does not specify a SID.
   --delete-all-tags
   --delete-tags value                          delete-tags e.g. 'key,...'
   --egress-filter value                        apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
   --hostname value
   --identity-alias-healthcheck-username value  The username of the AD service account that will be used for health checks, and LDAPS SID resolution if necessary.
   --identity-set-id value
   --identity-set-name value                    set the identity set by name
   --lock-required                              Require a resource lock to access the resource to ensure it can only be used by one user at a time.
   --name value                                 datasource name
   --port value                                 (default: 0)
   --port-override value                        Port on which to listen for connections to this resource on clients. Specify "-1" to automatically allocate an available port. (default: -1)
   --proxy-cluster-id value                     proxy cluster id
   --sid value                                  Windows Security Identifier (SID) of the configured Username, or AD service account if using LDAPS SID resolution, required for strong certificate mapping in full enforcement mode. (secret)
   --subdomain value, --bind-subdomain value    DNS subdomain through which this resource may be accessed on clients (e.g. "app-prod" allows the resource to be accessed as "app-prod.<your-org-name>.<sdm-proxy-domain>"). Only applicable to HTTP-based resources or resources using virtual networking mode.
   --tags value                                 tags e.g. 'key=value,...'
   --timeout value                              set time limit for command
   --username value                             (secret)

ssh

NAME:
   sdm admin servers clone ssh - clone SSH (Public Key) server

USAGE:
   sdm admin servers clone ssh [command options] <ID>

OPTIONS:
   --allow-deprecated-key-exchanges  sdm must use TLS to connect
   --delete-all-tags
   --delete-tags value               delete-tags e.g. 'key,...'
   --egress-filter value             apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
   --hostname value
   --key-type value
   --name value                      datasource name
   --port value                      (default: 0)
   --port-forwarding
   --port-override value             port profile override (default: -1)
   --tags value                      tags e.g. 'key=value,...'
   --username value                  (secret)

ssh-cert

NAME:
   sdm admin servers clone ssh-cert - clone SSH (Certificate Based) server

USAGE:
   sdm admin servers clone ssh-cert [command options] <ID>

OPTIONS:
   --allow-deprecated-key-exchanges             sdm must use TLS to connect
   --bind-interface value                       bind interface (default: "127.0.0.1")
   --delete-all-tags
   --delete-tags value                          delete-tags e.g. 'key,...'
   --egress-filter value                        apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
   --hostname value
   --identity-alias-healthcheck-username value
   --identity-set-id value
   --identity-set-name value                    set the identity set by name
   --key-type value
   --name value                                 datasource name
   --port value                                 (default: 0)
   --port-forwarding
   --port-override value                        port profile override (default: -1)
   --subdomain value, --bind-subdomain value                            DNS subdomain through which this resource may be accessed on clients (e.g. "app-prod" allows the resource to be accessed as "app-prod.<your-org-name>.<sdm-proxy-domain>"). Only applicable to HTTP-based resources or resources using virtual networking mode.
   --tags value                                 tags e.g. 'key=value,...'
   --timeout value                              set time limit for command
   --username value                             (secret)

ssh-customer-key

NAME:
   sdm admin servers clone ssh-customer-key - clone SSH (Customer Managed Key) server

USAGE:
   sdm admin servers clone ssh-customer-key [command options] <ID>

OPTIONS:
   --allow-deprecated-key-exchanges             sdm must use TLS to connect
   --bind-interface value                       bind interface (default: "127.0.0.1")
   --delete-all-tags
   --delete-tags value                          delete-tags e.g. 'key,...'
   --egress-filter value                        apply filter to select egress nodes e.g. 'field:name tag:key=value ...'
   --hostname value
   --identity-alias-healthcheck-username value
   --identity-set-id value
   --identity-set-name value                    set the identity set by name
   --name value                                 datasource name
   --port value                                 (default: 0)
   --port-forwarding
   --port-override value                        port profile override (default: -1)
   --private-key value                          The file path of the private key used to authenticate with the server. (secret)
   --subdomain value, --bind-subdomain value                            DNS subdomain through which this resource may be accessed on clients (e.g. "app-prod" allows the resource to be accessed as "app-prod.<your-org-name>.<sdm-proxy-domain>"). Only applicable to HTTP-based resources or resources using virtual networking mode.
   --tags value                                 tags e.g. 'key=value,...'
   --timeout value                              set time limit for command
   --username value                             (secret)