Description

Manage Arctera Enterprise Vault Service Account.

Vendor

This platform is designed for remote account management for the following target:

Vendor	Arctera
Product	Enterprise Vault
Product Category	Application
Product Versions	v15.1

CyberArk

This platform works with the following CyberArk versions:

CyberArk Solution	Privileged Credentials Management
CyberArk Product	Central Policy Manager (CPM)
CyberArk Versions
Artifact Version
Out of the Box	NO
Out of the Box in versions
Privilege Cloud	BOTH

Support & Certification

Support Level	STANDARD
Developed by	CyberArk / Arctera
Certification Level	CERTIFIED
Connection Methods	PowerShell Remoting

Actions

The following table lists the supported management actions for this platform:

Action	Supported	Permissions
Verify	NO
Change	YES	see logon account permissions
Reconcile	N/A (usage plugin)
Delete	N/A (usage plugin)

Linked Accounts

The following linked accounts are in use by the plugin.

Logon Account

Supported	YES
Required	YES
Platforms	Windows Domain Account
Permissions	Member of local administrators group on Enterprise Vault servers. On the Enterprise Vault server, which is managed by CyberArk Central Policy Manager(CPM), you must create a PSSessionConfiguration named EVCyberArkConfig using command below embedding the CyberArk login account credentials. See pre-requisite for command details.

Reconcile Account

Supported	NO
Required	NO
Platforms
Permissions

ExtraPass2 Account

Supported	NO
Required	NO
Platforms
Permissions

Prerequisites

The following prerequisites are required on the machine that runs this plugin :

Config object named 'EVCyberArkConfig' to be created beforehand on Enterprise Vault server (address of usage object within Cyberark) with logon account credentials embedded. To create a PSSessionConfiguration named EVCyberArkConfig using command below embedding the CyberArk login account credentials:
Register-PSSessionConfiguration -Name EVCyberArkConfig -RunAsCredential <Domain\CPMLoginUserName> -
ProcessorArchitecture x86 -Force
Note: Any change to CyberArk login account credentials, will need re-creation of above configuration object
removing previously created. Refer to the below links for more details on PowerShell commands to use for the same:
1. Register-PSSessionConfiguration: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/register-pssessionconfiguration?view=powershell-7.5
2. Get-PSSessionConfiguration: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/get-pssessionconfiguration?view=powershell-7.5
3. Unregister-PSSessionConfiguration: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/unregister-pssessionconfiguration?view=powershell-7.5

2. The CPM plugin expects the following PowerShell script to be located on the Enterprise Vault Server: C:\Program Files (x86)\Enterprise Vault\PowerShellScripts\SetEVServiceAccountPasswordUsingCyberArk.ps1 (this script is available from Arctera and support cases regarding issues with this script file will need to be brought up with Arctera Support as Cyberark Support will not be able to assist.)

Installation

Import Platform

See Import a platform package topic within CyberArk Docs online.

Account Settings

Account Mandatory Parameters

Specify the following parameters on the account:

Parameter Name	Description	Acceptable Values
address	The address of the Enterprise Vault server	FQDN

Account Optional Parameters