Description

Update the DSN of Venafi Trust Protection Platform privileged operational and/or dbo accounts.

Vendor

This platform is designed for remote account management for the following target:

Vendor	Venafi
Product	Trust Protection Platform
Product Category	Application
Product Versions	21.1.0

CyberArk

This platform works with the following CyberArk versions:

CyberArk Solution	Privileged Credentials Management
CyberArk Product	Central Policy Manager (CPM)
CyberArk Versions	9.x, 10.x, 11.x
Artifact Version	1.0
Out of the Box	NO
Out of the Box in versions

Support & Certification

Support Level	STANDARD
Developed by	CyberArk
Certification Level	CERTIFIED
Connection Methods	WinRM

Actions

The following table lists the supported management actions for this platform:

Action	Supported	Permissions
Verify	NO
Change	YES
Reconcile	NO
Delete	NO

Linked Accounts

The following linked accounts are in use by the plugin.

Logon Account

Supported	YES
Required	YES
Platforms	Windows Domain or Local.
Permissions	WinRM and permissions on the TPP server to update the system configuration. If the User Type is Operational then the Logon Account also needs permission to restart VenafiLogServer and VED windows services and perform an iisreset. Windows domain logon accounts require the "Log on To" field.

Prerequisites

The following prerequisites are required on the machine that runs this plugin :

WinRM enabled from CPM to Target Server (Venafi Server).
Venafi TPP Configuration utility installed on the Target Server (Venafi Server)

General Notes

This is a usage (service) platform.
The Target Platform can be a Windows Domain platform
This plugin will restart two windows services if the user type is "operational"
- If these services use the Target Credential as the "Logon To" then they will need to be added as Window Service Usages and should be updated before running this usage plugin

Installation

Import Platform

See Import a platform package topic within CyberArk Docs online

Associate Usage Platform to Master Platform

In the relevant Master Platform under the UI & Workflows parameters, add the ID of the usage platform in the list of Usages. For more information, see Edit a platform.

Configuration

Platform Settings

Specify the following parameters at the platform level:

Parameter Name	Description	Acceptable Values	Default Value
Database	The database to connect to	String	Venafi
UseSQLAuth	An optional bool to indicate this account is an SQL server based user.	Yes or No	No
Port	The port used by the SQL Server.	Integer	1433
EnableTLS	An optional bool to indicate TLS encrypted connection should be used with this SQL server.	Yes or No	No
EnableAG	An optional bool to indicate SQL server is an AlwaysOn AG group	Yes or No	No

Account Settings

Account Mandatory Parameters

Specify the following parameters on the account:

Parameter Name	Description	Acceptable Values
Username	Username of the account connecting to the database.	string
Venafi Server (Address)	Address of the TPP utility. This address will be used during the remote PowerShell connection.	Hostname, FQDN, IP Address
VenafiUserType	Indicates you are setting Database Owner (DBO) user or Operational user	DBO or Operational
SQLServerHost	The address where the SQL server is hosted.	Hostname, FQDN, IP Address

Account Optional Parameters