Description

Manage Morphisec local privileged accounts.

Vendor

This platform is designed for remote account management for the following target:

Vendor	Morphisec
Product	Moving Target Defense
Product Category	Cloud Service
Product Versions	5.2.2

CyberArk

This platform works with the following CyberArk versions:

CyberArk Solution	Privileged Credentials Management
CyberArk Product	Central Policy Manager (CPM)
CyberArk Versions	11.x
Artifact Version
Out of the Box	NO
Out of the Box in versions

Support & Certification

Support Level	STANDARD
Developed by	CyberArk / Morphisec
Certification Level	CERTIFIED
Connection Methods	HTTPS

Actions

The following table lists the supported management actions for this platform:

Action	Supported	Permissions
Verify	YES
Change	YES
Reconcile	NO
Delete	NO

Linked Accounts

The following linked accounts are in use by the plugin.

Logon Account

Supported	NO
Required	NO
Platforms
Permissions

Reconcile Account

Supported	NO
Required	NO
Platforms
Permissions

Prerequisites

The following prerequisites are required on the machine that runs this plugin :

Web Application CPM Plugin Framework

Credentials Management .NET SDK

Installation

Import Platform

Do the following to import the platform:

Step

How To

Add missing file categories

Add the following file categories, if they do not already exist:

File Category Name	Type	Valid Value	Required
URL	String	Logon URL	Yes

Import the platform

See Add new platform topic in the Online Help Center or in the Privileged Access Security Implementation Guide.

Configuration

Platform Settings

Specify the following parameters at the platform level:

Parameter Name	Description	Acceptable Values	Default Value
VerifyURL	URL used for 'Verify' action. URL is provided by the account object attribute, or if absent – URL can be set at the platform level Parameter. ex: https://<address>:<port>/tims	{URL}	{URL}
ChangeURL	Same as above.	Same as above.	Same as above.
ReconcileURL	Same as above.	Not used	Same as above.
WebFormFieldsFile	WebApp Framework script file.	MorphisecWebFormFields.ini	MorphisecWebFormFields.ini
RunVerifyAfterChange	Run a 'Verify' action after a successful 'Change' Action	Yes	Yes
RunVerifyAfterReconcile	Run a 'Verify' action after a successful 'Reconcile' Action	Yes	Yes
ActionTimout	Value in seconds the CPM should wait for each individual script action to complete.		5
PageLoadTimeout	Value in seconds the CPM should wait for a target page to complete loading.		120
Browser	Target Browser IE/Chrome - Default Chrome	chrome	chrome
BrowserPath	Full Path to the browser exe on the CPM Server.		C:\Program Files\Google\Chrome\Application\chrome.exe
DriverFolder	Full Path for the Password Manager\bin Directory on the CPM Server.		C:\Program Files (x86)\CyberArk\Password Manager\bin
EnforceCertificate	Enforce Certificate Validity - supported values: Yes, No, IgnoreUntrustedCertificate	Yes/No/IgnoreUntrustedCertificate	IgnoreUntrustedCertificate
EnableExtendedDebug	Enable Extended Debugging	Yes/No	No
Debug	Enable debugging Log	Yes/No	No

Account Settings

Account Mandatory Parameters

Specify the following parameters on the account:

Parameter Name	Description	Acceptable Values
URL	Target URL (see Platform Settings above)	https://someAWSAddress.ec2.amazonaws.com:9443/logon

Account Optional Parameters