Description
Manage Thales SafeNet Operator Accounts via API
Vendor
This platform is designed for remote account management for the following target:
| Vendor | Thales |
|---|---|
| Product | SafeNet |
| Product Category | Cloud Service |
| Product Versions | SaaS |
CyberArk
This platform works with the following CyberArk versions:
| CyberArk Solution | Privileged Credentials Management |
|---|---|
| CyberArk Product | Central Policy Manager (CPM) |
| CyberArk Versions | CPM v10.10 or greater |
| Artifact Version | 1.0 |
| Out of the Box | NO |
Support & Certification
| Support Level | STANDARD |
|---|---|
| Developed by | CyberArk |
| Certification Level | CERTIFIED |
| Connection Methods | HTTPS |
Actions
The following table lists the supported management actions for this platform:
| Action | Supported | Permissions |
|---|---|---|
| Verify | YES | Requires Associated Reconcile Account |
| Change | YES | Requires Associated Reconcile Account |
| Reconcile | YES | Requires Associated Reconcile Account |
| Delete | NO |
Linked Accounts
The following linked accounts are in use by the plugin.
Logon Account
| Supported | NO |
|---|---|
| Required | NO / {For certain scenarios} |
| Platforms | |
| Permissions |
Reconcile Account
| Supported | YES |
|---|---|
| Required | YES |
| Platforms | |
| Permissions |
Prerequisites
The following prerequisites are required on the machine that runs this plugin :
This plugin does not require any additional prerequisites.
Installation
Import Platform
Do the following to import the platform:
| Step | How To | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Add missing file categories | Add the following file categories, if they do not already exist:
| ||||||||
| Import the platform | See Add new platform topic in the Online Help Center or in the Privileged Access Security Implementation Guide. |
Configuration
Platform Settings
Specify the following parameters at the platform level:
| Parameter Name | Description | Acceptable Values | Default Value |
|---|---|---|---|
| ChainsFilePath | Configuration file of REST call logic | bin\ThalesSafenetChains.xml | |
| Port | Port to use in URL/s for password management | 443 | |
| UseSSL | Yes – Use https with the URL/s No - Use http with the URL/s IgnoreUntrustedCertificate – Use https, but ignore untrusted certificate | Yes/No | Yes |
| Organization | Organization name identifier (container) for the target accounts | <string> | Change Me |
| Debug | Whether to create a debug log. Useful for troubleshooting. | Yes/No | No |
| passwordexpirationindays | Number of days to add to the current day for the password to expire | Positive integer Should match the # of days set on the SafeNet password policy | 10 |
Account Settings
Account Mandatory Parameters
Specify the following parameters on the account:
| Parameter Name | Description | Acceptable Values |
|---|---|---|
| Username | ||
| Address | ||
Account Optional Parameters
Specify the following parameters on the account:
| Parameter Name | Description | Acceptable Values | Default Value |
|---|---|---|---|
| Organization | Organization name identifier (container) for the target account If set, will override platform Organization value | <string> |
