Description

Manage credentials for GE L90 Line Differential Relay accounts.

Vendor

This platform is designed for remote account management for the following target:

CyberArk

This platform works with the following CyberArk versions:

Support & Certification

Actions

The following table lists the supported management actions for this platform:

Linked Accounts

The following linked accounts are in use by the plugin.

Logon Account

Reconcile Account

Prerequisites

Target device

The following prerequisites are required on the machine that runs this plugin:

Reset a relay to factory settings. Then, set up relay for usage with plugin.

Pre-requisites:

• Verify that there are no active connections to the relay.
• Make sure you have the current password for Administrator role.
• Make sure you have physical access to the relay. All work will be done on the relay’s front panel.
• Understand how to navigate in relay’s front panel (refer to your relay’s documentation for instructions).

How to read the instructions for setting up the relay:

• menu item -> menu item – a transition between menu items.
• menu item : option|value – menu item where an option should be selected or a value entered (make sure to press Enter to execute the change).

All instructions start in the main menu with items: Settings, Commands, Targets and Actual Values.

Instructions on setting up the relay via front display:

1. Log in as Administrator role.
   1. Settings -> Product Setup -> Security -> Login : Administrator -> Enter Password : <Administrator Password>
2. Enter command to reset relay to factory settings.
   1. Commands -> Relay Maintenance -> Service Command : 20511
   2. The relay will reset itself. This takes some time.
      
3. Log in as Administrator role.
   
   1. Settings -> Product Setup -> Security -> Login : Administrator -> Enter Password : <Administrator Default Password (ChangeMe1#)>
4. Set up IP address.
   1. Settings -> Product Setup -> Communications -> Network -> Network Port 1 -> PRT1 IP Address : <Desired/Available IP Address>
   2. Try to ping the IP address you set above; it should be reachable.
5. Program the relay.
   1. Settings -> Product Setup -> Installation -> Relay Settings : Programmed
6. Log off from Administrator role.
   1. Settings -> Product Setup -> Security -> Login : None
   2. Use plink.exe with Administrator role (use default password) to establish SSH connection.
      
      

If all instructions were followed correctly and results are successful (ping and SSH connection), the GE L90 Universal Relay is ready to be used with the plugin. 

Plugin

• Plugin requires Python version 3.x, 32-bit only.
  • Versions 2.x and any 64-bit (including Python 3.x 64-bit) are unsupported.
• DEP must be disabled for the plugin to function properly.

DEP Setup

DEP (Data Execution Prevention) must be disabled

• To disable DEP:
  • Open a command window "As Administrator"
  • Run the command: bcdedit.exe /set nx AlwaysOff
  • Restart the server
• To check DEP status:
  • Open a command window "As Administrator"
  • Run the command: wmic OS Get DataExecutionPrevention_SupportPolicy
    • 0 – DEP is disabled for all processes.
    • 1 – DEP is enabled for all processes.
    • 2 – DEP is enabled for only Windows system components and services.
    • 3 – DEP is enabled for all processes.

Installation

Import Platform

Do the following to import the platform:

Configuration

Platform Settings

Specify the following parameters at the platform level:

Account Settings

Account Mandatory Parameters

Specify the following parameters on the account: