Veritas Appliance Guide for CyberArk Plugin Configuration

Last Published:
Product(s): Appliances (6.0, 5.5.0.1, 5.3, 5.1.1, 5.1, 5.0, 4.2, 4.1, 4.0, 3.3.0.1, 3.3, 3.2, 3.1, 3.0)
Platform: NetBackup Appliance OS,Flex Appliance OS

Veritas Remote Management Interface via API CyberArk Plugin

[Marketplace document updates only]

The Veritas Remote Management Interface via API Plugin is a CyberArk component. The plugin is supported for the following Veritas appliances that use the IPMI platform:

  • Access Appliance

  • Flex Appliance

  • NetBackup Appliance

The following describes the supported plugin functionality:

  • Verify that the sysadmin and other account passwords are valid.

  • Change the password of sysadmin account.

  • Reconcile, or use an associated account to change the password of the sysadmin account.

Requirements and prerequisites

The following describes the requirements and tasks that you must perform before you can configure the plugin:

  • The supported Veritas appliances must use one of the following Intel BMC firmware versions:

    Intel BMC FW Rev 1.90.0CF6E935

    Intel BMC FW Rev 2.37.1f190479

    Intel BMC FW Rev 2.48.89b32e0d

    Intel BMC FW Rev 2.86.2da97d3f

    Intel BMC FW Rev 2.88.79ef9f8b

    Intel BMC FW Rev 2.88.c7c905f1

    Intel BMC FW Rev 2.88.e172ff67

    Intel BMC FW Rev 2.88.e5f45b9c

    Intel BMC FW Rev 2.89.7e3b728b

    Intel BMC FW Rev 2.91.8a19dcde

    Intel BMC FW Rev 2.92.9CAAE307

    Intel BMC FW Rev 2.92.76E25E1D

    To upgrade to the appropriate Intel BMC firmware version for your appliance, click the following link for instructions about how to update the appliance firmware:

    https://www.veritas.com/content/support/en_US/downloads/update.UPD966809

  • A CyberArk PAM (Privileged Access Manager) solution.

  • Download the Veritas Remote Management Interface via API Plugin from the following CyberArk Marketplace site and install it:

    https://cyberark-customers.force.com/mplace/s/#a35Ht000000rlweIAA-a39Ht000003SejKIAS

Configuration

After you have downloaded and installed the plugin, perform the following configuration steps in the application on the CyberArk site.

To configure the plugin for the Veritas Remote Management Interface via API

  1. Log in to the CyberArk PVWA.
  2. On the Account View page, click Add account and do the following:

    • For Select system type, click Imported platforms.

    • For Assign to platform, click Veritas Remote Management Interface via API.

    • For Store in safe, select where you want to store the configuration. You can also click Create Safe to create a new one.

    • For Define properties, enter the following:

      • Address: Enter the appliance fully qualified domain name.

      • Username: Enter the sysadmin username.

      • Password: Enter the associated password for the entered sysadmin username.

The plugin is designed for use with an SSL certificate. If the target appliance uses a self-signed certificate, you must reconfigure the plugin to use that certificate type as follows:

To reconfigure the plugin to use a self-signed certificate

  1. Log in to the CyberArk PVWA.
  2. Navigate to the Platform Management page and do the following:

    • Click the platform named Veritas Remote Management Interface via API.

    • On the lower right side, click Edit.

    • In the left column, expand Automatic Password Management and click Additional Policy Settings.

    • In the Properties column, click Use SSL. Then, in the Value column, right-click on Yes and select IgnoreUntrustedCertificate.