Description
Manage credentials for GE N60 Network Relay accounts.
Vendor
This platform is designed for remote account management for the following target:
| Vendor | GE |
|---|---|
| Product | N60 Network Relay |
| Product Category | Network Device |
| Product Versions | N60 |
CyberArk
This platform works with the following CyberArk versions:
| CyberArk Solution | Privileged Credentials Management |
|---|---|
| CyberArk Product | Central Policy Manager (CPM) |
| CyberArk Versions | 9.1 or higher |
| Artifact Version | 1.0 |
| Out of the Box | NO |
| Out of the Box in versions |
Support & Certification
| Support Level | STANDARD |
|---|---|
| Developed by | CyberArk |
| Certification Level | CERTIFIED |
| Connection Methods | SSH |
Actions
The following table lists the supported management actions for this platform:
| Action | Supported | Permissions |
|---|---|---|
| Verify | YES | |
| Change | YES | |
| Reconcile | YES | |
| Delete | NO |
Linked Accounts
The following linked accounts are in use by the plugin.
Logon Account
| Supported | NO |
|---|---|
| Required | NO |
| Platforms | |
| Permissions |
Reconcile Account
| Supported | YES |
|---|---|
| Required | YES |
| Platforms | |
| Permissions |
Prerequisites
The following prerequisites are required on the machine that runs this plugin:
Reset a relay to factory settings. Then, set up relay for usage with plugin.
Prerequisites:
- Verify that there are no active connections to the relay.
- Make sure you have the current password for Administrator role.
- Make sure you have physical access to the relay. All work will be done on the relay’s front panel.
- Understand how to navigate in relay’s front panel (refer to your relay’s documentation for instructions).
How to read the instructions for setting up the relay:
- menu item -> menu item – a transition between menu items.
- menu item : option|value – menu item where an option should be selected or a value entered (make sure to press Enter to execute the change).
All instructions start in the main menu with items: Settings, Commands, Targets and Actual Values.
Instructions on setting up the relay via front display:
- Log in as Administrator role.
- Settings -> Product Setup -> Security -> Login : Administrator -> Enter Password : <Administrator Password>
- Enter command to reset relay to factory settings.
- Commands -> Relay Maintenance -> Service Command : 20511
- The relay will reset itself. This takes some time.
- Log in as Administrator role.
- Settings -> Product Setup -> Security -> Login : Administrator -> Enter Password : <Administrator Default Password (ChangeMe1#)>
- Set up IP address.
- Settings -> Product Setup -> Communications -> Network -> Network Port 1 -> PRT1 IP Address : <Desired/Available IP Address>
- Try to ping the IP address you set above; it should be reachable.
- Program the relay.
- Settings -> Product Setup -> Installation -> Relay Settings : Programmed
- Log off from Administrator role.
- Settings -> Product Setup -> Security -> Login : None
- Use plink.exe with Administrator role (use default password) to establish SSH connection.
If all instructions were followed correctly and results are successful (ping and SSH connection), the GE N60 Universal Relay is ready to be used with the plugin.
Installation
Import Platform
Do the following to import the platform:
| Step | How To |
|---|---|
| Import the platform | See Add new platform topic in the Online Help Center or in the Privileged Account Security Implementation Guide. |
Configuration
Platform Settings
Specify the following parameters at the platform level:
| Parameter Name | Description | Acceptable Values | Default Value |
|---|---|---|---|
| PythonPath | An absolute path to directory containing Python executable (without backslash at the end of path). | A valid file path | C:\Python27 |
| ModbusAddress | A specific Modbus Slave address. This is NOT the same as regular IP address of the relay. | A valid Modbus slave address | 254 |
| port | A port on a relay where the plugin will connect. | A valid port number | 502 |
| localhost | A localhost address to which ModScript connects. | A valid localhost address | 127.0.0.1 |
Account Settings
Account Mandatory Parameters
Specify the following parameters on the account:
| Parameter Name | Description | Acceptable Values |
|---|---|---|
| Address | An address of a target device to connect to. | A valid address |
| Username | A username that exists on the target device (a relay). | Administrator, Engineer, Operator |