Veritas Appliance Guide for CyberArk Plugin Configuration
Veritas Flex Appliance WORM Instance CPM
[Updated plugin; version 1.1]
The Veritas Flex Appliance WORM Instance CPM is a CyberArk plugin component. It supports password verification and change for the built-in msdpadm and MSDP user (non-msdpadm) login accounts configured on a WORM instance.
The following describes the requirements and tasks that you must perform before you can configure the plugin:
A configured WORM instance on a compatible version. See the following article for the list of supported versions:
A CyberArk PAM (Privileged Access Manager) solution.
Download the Veritas Flex Appliance WORM Instance CPM plugin from the following CyberArk Marketplace site and install it:
https://cyberark-customers.force.com/mplace/s/#a35Ht000000rlwZIAQ-a39Ht000003SejFIAS
Limitations:
Although the option is available with this plugin, this functionality is not supported. Password change restrictions for the msdpadm and MSDP user accounts on a WORM instance prevent reconciliation. Any attempt to use the option fails and displays an error message.
To change the passwords for MSDP user accounts, you must associate the built-in msdpadm account as the Instance Administrator Account for each of the configured MSDP user accounts in CyberArk. The "Association" section describes the procedure.
After you have downloaded and installed the plugin, perform the following configuration steps in the application on the CyberArk site.
Note:
You can use this procedure to configure either msdpadm or MSDP users that are configured on WORM instances.
To configure the plugin for a Flex Appliance WORM Instance to manage msdpadm or MSDP users
- Log in to the CyberArk PVWA.
- On the Account View page, click Add account and do the following:
For Select system type, click Imported platforms.
For Assign to platform, click Veritas Flex Appliance WORM Instance via SSH.
For Store in safe, select where you want to store the configuration. You can also click Create Safe to create a new one.
For Define properties, enter the following:
Address: Enter the Flex Appliance fully qualified domain name.
Username: Enter the msdpadm or MSDP username.
Password: Enter the associated password for the entered msdpadm or MSDP username.
After you have added any MSDP user accounts, you must associate each one with the built-in msdpadm account as the Instance Administrator Account. This task is required as it enables you to verify and change the passwords for MSDP user accounts.
To associate the built-in msdpadm account as the Instance Administrator Account for a configured MSDP user account
- On the Accounts View page:
On the left side of the page, select the appropriate msdp user account.
On the upper right side of the page, click Select Additional details & actions in classic interface.
- On the Account Details page, on the upper right side of the page, click Associate for the Instance Administrator Account.