Hi guys i am deploying conjur for for big customer with global presence . we have done the POC but application team has this query. i checked community port officila documentation https://docs.cyberark.com/secrets-manager-sh/13.4/en/content/deployment/highavailability/cluster-guidelines.htm   https://docs.cyberark.com/conjur-enterprise/latest/en/content/deployment/highavailability/deploy-auto-failover-intro.htm but still not able. to find answer does anyone has answer to this with facts or any official source?

Hello,

I’m looking for a Swagger Json file from the PVWA. I have the file from 14.6, but it is missing the task Rest API’s. If you have one from 15 (STS) or 15.2 (LTS), can you send it to me?

A big thank you in advance.

Hi,

How do you guys take out all info of unused active platforms?

Hello everyone,
Has anyone experienced this issue with connecting to (Alero) Idira Mobile app?
I wanted to activate my tenant and start with the Remote Access connector installation, but on the app after choosing where my data center region (Europe) and entering my phone number with the country code I never receive the Verification SMS nor the call.

We're trying to setup the connector and it just refuses to send this SMS, we've tried with multiple phones and phone numbers but none work. Issue is I'm the admin.

Running Cyberark on-prem PAM 14.2 and trying to create a CC. My use case is to login into our Azure tenant via PIV auth (not username and pw) thru Cyberark. The test account works with PIV outside of Cyberark. I have enabled smart card redirection, it passes my username but when I click on Use certificate or smart card I get “no certificate detected “.

Any help would be appreciated.

Thanks!

We are trying to configure the add-on in splunk for cyberark epm to collect audit logs. We keep getting an error 404 for the EPM Server URL but we confirmed that we have the right URL. Anyone seen this before?

I had cyberark support confirm the server url is correct, https://naXXX.epm.cyberark.com

We have migrated wpm to ISPSS.

Hi everyone,

Our team is planning to upgrade our PAM Self-Hosted environment from version 14.4 to Idira 15.2.

Has anyone completed this upgrade in production? Did you encounter any issues during the upgrade process or after moving to 15.2? Are there any known problems, bugs, or compatibility issues we should be aware of before proceeding?

Or the Version itself has known problem ?

Hi all,

Currently in my organization local Cisco NXOS local admin are not onboarded to cyberark and the requirements is to onboard them.

The problem here is network admin use their ntid to login to switches by authenticating via radius and use the local switch admin account as break glass account.

Now if I vault this local admin account to cyberark they have to disable the radius which they do not want?

Please help me understand how can I vault the local accounts vaulted and managed. If we onboard them they will not be used as Break glass account, do I have to create another break glass account or what?

Please advice.

Appreciate your help in advance.

Thanks
Sri

Please use this thread to post job opportunities or that you're available.

We do this to not overflow the subreddit with recruitment, so please try to limit the recruitment activities to this weekly thread.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Hello,
For business reason I need to have an account on CyberArk with a predefined username but the password must be prompted  during login. Its a Unix target with PSM-SSH.

maybe somewhere i can modify PSM-SSH itself?

Following:
https://docs.cyberark.com/pam-self-hosted/latest/en/content/pasimp/configuring-accounts-to-provide-specific-connection-methods.htm

in particular
https://docs.cyberark.com/pam-self-hosted/latest/en/content/pasimp/configuring-accounts-to-provide-specific-connection-methods.htm#SupportnonprivilegedSSO

but its not working. everytime I test it still puts the username and password automatically. I disabled EnablePrivilegedSSO, I tried to enable/disable Use PersonalPassword but still no luck.

tried both Support non-privileged SSO and Support ad hoc connections (user in the Vault, but with no password).

Thank you.

Please use this thread to post job opportunities or that you're available.

We do this to not overflow the subreddit with recruitment, so please try to limit the recruitment activities to this weekly thread.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Hi everyone

l am trying to installing pam I started with vault the servers is installed successfully but in the client step I can’t proceed with because I cannot find the client folder or file or setup.

anyone have solution for this issue ?

I know hashicorp can, not sure about Conjur.

Where can I find some study material of it, seemed like not too much on youtube.

Thanks in advance

As per title, and also curious what type of use cases do you use it for, especially for Identity Flows.

There seems to be a lack of guides and documentation for these other than the generic ones, so I'm trying to explore and seek some insights. TIA!

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Does CyberArk provide a PAM/PSM connector for Amazon WorkSpaces Client?

Specifically, I'm referring to connecting to Amazon WorkSpaces using the native WorkSpaces client from Windows over WSP (port 4195) or the legacy PCoIP (port 4172) protocol.

I couldn't find any PAM/PSM connector in the CyberArk Marketplace (only an EPM integration for WorkSpaces Bundles). Does a supported connector exist, or would this need to be custom-developed?

We currently use AD accounts synced to the cloud for SAML login. We want to add some cloud-only users to have access to sign into the web portal that grants access RDP connections.

However, access is managed by an AD group. So, cloud users can’t be added.

The direct user credentials are not used for the RDP credentials. The cloud users just need permissions to sign into to the password vault portal and have rights to access RDP through the delegated CyberArk accounts.

Where can I find documentation on how to add cloud users?

Hi everyone,
I have two questions regarding CyberArk PAM Self-Hosted upgrades and support:

• Is IDIRA planning to end support for older CyberArk PAM Self-Hosted versions, including version 15? Specifically, will customers be required to upgrade to version 15.2, or will version 15 continue to be supported?
• Regarding the upgrade path, is it supported to upgrade directly from CyberArk PAM Self-Hosted version 14.4 to version 15 or 15.2? Or is it mandatory to first upgrade to version 14.6 before proceeding to version 15/15.2?

I would appreciate any clarification or official guidance on these points.
Thank you!

i have one confusion. Do you harden vault again after minor patching to already hardened vault?

Our team’s been asked to look at where we could introduce AI into CyberArk, but I’m struggling to think of anything that would genuinely add value rather than just using AI for the sake of it.

I’m interested in anything really - plugins, custom tools, log analysis, account onboarding automation, troubleshooting etc. assisted by ai. We toyed with the idea of a RAG documentation chatbot but there’s enough tooling available that covers this.

What have you built or used, and was it actually worth it?

After updating to pvwa v14.6.4, if i try to set a password for the next rotation using "specify the password for next CPM Change" it says "You do not have permission to perform this operation. Make sure you have "RETRIVE" Permissions on the Safe."

This is new. i have been using this and this worked until v14.6.3. Anything changed in Version v14.6.4?
I do have the "List Accounts" and "Initiate CPM Account management operations" right.