Veritas Appliance Guide for CyberArk Plugin Configuration

Last Published:
Product(s): Appliances (6.0, 5.5.0.1, 5.3, 5.1.1, 5.1, 5.0, 4.2, 4.1, 4.0, 3.3.0.1, 3.3, 3.2, 3.1, 3.0)
Platform: NetBackup Appliance OS,Flex Appliance OS

Veritas NetBackup Flex Scale and Access Appliance API CyberArk CPM plug-in

The Veritas NetBackup Flex Scale and Access Appliance API CPM Plugin is a CyberArk component. The plugin integrates the NetBackup Flex Scale and Access Appliance user interfaces with CyberArk and lets you manage the user accounts on those appliances. The following describes the supported plugin functionality:

  • Change or verify passwords for the following NetBackup Flex Scale Appliance user accounts: all local users, maintenance, and all NetBackup users.

  • Change or verify passwords for the following Access Appliance user accounts: primary, local, and maintenance.

  • Limitations:

    • Reconciliation is not supported.

    • The plugin cannot verify or change passwords for accounts when the target appliance is offline, especially if the appliance management console is running on it. Once the management console is operational again, the plugin functionality can be reinstated.

    • IPMI users, multifactor authentication configured users, and remote users are not supported.

Requirements and prerequisites

The following describes the requirements and tasks that you must perform before you can configure the plugin:

  • A configured NetBackup Flex Scale Appliance with software versions 3.2 and later, or a configured Veritas Access Appliance with software versions 8.2 and later.

  • A CyberArk PAM (Privileged Access Manager) solution.

  • CyberArk CPM (Central Policy Manager) configuration.

  • Users must complete their first appliance logon and change their default passwords before they can be added to the CyberArk password vault.

  • Download the Veritas NetBackup Flex Scale/Access Appliance API CPM Plugin from the following CyberArk Platform site and install it:

    https://cyberark.my.site.com/mplace/s/#--Veritas

Configuration

After you have downloaded and installed the plugin, perform the following configuration steps in the application on the CyberArk site.

To configure the plugin for a NetBackup Flex Scale or Access Appliance administrator account

  1. Log on to the CyberArk PVWA.
  2. On the Accounts View page, click Add account and do the following:

    • For Select system type, click Imported platforms.

    • For Assign to platform, click Veritas NetBackup Flex Scale or Access Appliance API via REST.

    • For Store in safe, select where you want to store the configuration. You can also click Create Safe to create a new one.

    • For Define properties, enter the following:

      Address: Enter the NetBackup Flex Scale or Access Appliance fully qualified domain name.

      Username: Enter the NetBackup NetBackup Flex Scale or Access Appliance administrator account username.

      Password: Enter the associated password for the entered NetBackup Flex Scale or Access Appliance administrator account username.

The plugin is designed for use with an SSL certificate. If the target appliance uses a self-signed certificate, you must reconfigure the plugin to use that certificate type as follows:

To reconfigure the plugin to use a self-signed certificate

  1. Log on to the CyberArk PVWA.
  2. Navigate to the Platform Management page and do the following:

    • Click once on the platform named Veritas NetBackup Flex Scale or Access Appliance API via REST. Then, on the lower-right side of the page, click Edit.

    • In the left column, expand Automatic Password Management and click Additional Policy Settings.

    • In the Properties column, click Use SSL. Then, in the Value column, right-click on Yes and select IgnoreUntrustedCertificate.