******************************************************************************************************************
**IF you are using HDM2, users with ("Administrator"|"Operator"|"CustomRole" with Security privilege) will work fine
**IF you are using HDM2, users with ("User") privilege session will last for 30 minutes
**IF you are using HDM2, too many requests in a short time may cause session overload
**IF you are using HDM2, Please wait for current sessions to expire before trying again if it doesn't work
**HDM2 maximum length of password is up to 20 characters
**HDM3 maximum length of password is up to 40 characters
******************************************************************************************************************


1.  Download the Credentials Management .NET SDK from the following link and unzip it into the CPM directory at "<Drive>:\Program Files (x86)\CyberArk\Password Manager\bin":
    https://community.cyberark.com/marketplace/s/#a3550000000EkA0AAK-a3950000000jjoOAAQ

2.  **For HDM3 users, this step can be skipped.**
    On the CPM server, edit the machine.config file, typically located at:
    "C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\machine.config"
    (Ensure that .NET Framework v4.0.30319 is the version in use on the CPM).
    Add the following configuration section immediately before the "<system.web>" node:
    XML
    ++++++++++++++++
    <system.net>
      <settings>
        <servicePointManager expect100Continue="false"/>
      </settings>
    </system.net>
    ++++++++++++++++

3.  **IF you are using http/80 to access HDM, you can skip step 3. and step 4.**
    Import the server certificate (which must be signed by a trusted CA and include the private key) into the HDM.
    - HDM Path: "Users & Security > Security > SSL Certificate > Upload SSL"
    **Important Certificate Requirements:**
    - The expiration date must be before January 19, 2038.
    - Do not use a self-signed certificate.
    - The certificate must contain the correct IP addresses or domain names of the HDM.

4.  **If your certificate is signed by a publicly trusted CA, skip this step.**
    On the CPM server, install the CA certificate into the "Trusted Root Certification Authorities" store of the Local Machine.
    Afterwards, restart the "CyberArk Password Manager" service from "Task Manager > Services".

5.  On the PVWA, when adding a new device, configure the following:
    - User ID: For the admin account, this is always "2". For other users, verify the ID in the HDM web GUI under "Users & Security > Users".
    - Port: "443" (or the specific port you have configured for the service).
    - Protocol: "https" (If using "http", the port must typically be changed to "80" accordingly).