CyberArk

Cherwell Service Management CPM

Cherwell Service Management CPM

Manage Cherwell accounts.



Vendor

This platform is designed for remote account management for the following target:

VendorCherwell
ProductCherwell
Product CategoryIdentity & Access Management
Product Versions



CyberArk

This platform works with the following CyberArk versions:

CyberArk Solution

Privileged Credentials Management 

CyberArk Product

Central Policy Manager (CPM)

CyberArk VersionsVersion 10.1 and above
Artifact Version
Out of the Box

NO

Out of the Box in versions
Privilege Cloud

BOTH



Support & Certification

Support Level

STANDARD 

Developed byCyberArk
Certification Level

CERTIFIED

Connection MethodsHTTPS



Actions

The following table lists the supported management actions for this platform:

ActionSupportedPermissions
Verify

YES 


Change

YES 


Reconcile

YES 


Delete

 NO




Linked Accounts

The following linked accounts are in use by the plugin.

Logon Account

Supported

 YES

Required

 YES

Platforms


Permissions

This account’s password is the API key to use with the REST API calls.

Reconcile Account

Supported

YES 

Required

NO 

Platforms


PermissionsThis account is used to authenticate to the REST API for acquiring the token in a reconcile process

ExtraPass2 Account

Supported

 NO

Required

 NO 

Platforms


Permissions



Prerequisites

The following prerequisites are required on the machine that runs this plugin:

Download and install the REST API Platform from Marketplace

If you already have an older version installed , remove the platform and install the newest version from Marketplace



Installation

Import Platform

See Import a platform package topic within CyberArk Docs online



Configuration

Platform Settings

Specify the following parameters at the platform level:

Parameter NameDescriptionAcceptable ValuesDefault Value
Debug

Whether to create a debug log. Useful for troubleshooting.

Yes/No

No

ChainsFilePath

Configuration file of REST call logic

string

bin\CherwellChains.xml

UseSSL

Setting this property to yes will create a REST API request using HTTPS and validate a proper certificate is used.
Setting this property to no will create a REST API request using HTTP.
Setting this property to ignoreuntrustedcertificates will create a REST API request using HTTPS but does not require a valid certificate.

Yes/No

Yes

Port

Port through which to connect 

non-negative int

-1 (Use default port for protocol http/https)



Account Settings

Account Mandatory Parameters

Specify the following parameters on the account:

Parameter NameDescriptionAcceptable Values
 UsernameAccount username

AddressServer address





Account Optional Parameters

Specify the following parameters on the account:

Parameter NameDescriptionAcceptable ValuesDefault Value