Description
Manage HPE ClearPass Local privileged accounts. The plug-in will authenticate to the HPE ClearPass API using the Username and Password Credential grant_type.
Vendor
This platform is designed for remote account management for the following target:
| Vendor | HPE |
|---|---|
| Product | ClearPass |
| Product Category | Website |
| Product Versions | 6.9.0.130064 |
CyberArk
This platform works with the following CyberArk versions:
| CyberArk Solution | Privileged Credentials Management |
|---|---|
| CyberArk Product | Central Policy Manager (CPM) |
| CyberArk Versions | 9.x, 10.x, 11.x, 12.x |
| Artifact Version | 1.0 |
| Out of the Box | NO |
| Out of the Box in versions |
Support & Certification
| Support Level | STANDARD |
|---|---|
| Developed by | CyberArk / HPE |
| Certification Level | CERTIFIED |
| Connection Methods | HTTP/HTTPS |
Actions
The following table lists the supported management actions for this platform:
| Action | Supported | Permissions |
|---|---|---|
| Verify | YES | |
| Change | YES | |
| Reconcile | YES | |
| Delete | NO |
Linked Accounts
The following linked accounts are in use by the plugin.
Logon Account
| Supported | YES |
|---|---|
| Required | YES |
| Platforms | |
| Permissions |
Linked Accounts
The Logon Account must contain the Client ID and Secret of the OAuth2 API Client. From the ClearPass Guest administration interface a new OAuth2 API Client can be created by browsing to the Administration > API Services > API Clients web page. Click on the Create API client button in the top right corner. The 'Grant Type' must be set as 'Username and password credentials (grant_type=password)'. After registering your app, you will receive a Client ID and a Client Secret. The Client ID should be stored as the Username of the linked Logon Account. The Secret should be stored as the Password of the linked Logon Account.
Reconcile Account
| Supported | YES |
|---|---|
| Required | NO |
| Platforms | |
| Permissions |
Prerequisites
The following prerequisites are required on the machine that runs this plugin :
Network access enabled from CPM machine to the HPE ClearPass API endpoint
Configuration
Platform Settings
Specify the following parameters at the platform level:
| Parameter Name | Description | Acceptable Values | Default Value |
|---|---|---|---|
| Port | The port used to connect to the target API | Integer | -1 |
| UseSSL | This will determine to use HTTPS or HTTP. It can only bypass a certificate warning by setting IgnoreUntrustedCertificate. | Yes, No, IgnoreUntrustedCertificate | Yes |
| Debug | To enable debug logs | Yes, No | No |
Account Settings
Account Mandatory Parameters
Specify the following parameters on the account:
| Parameter Name | Description | Acceptable Values |
|---|---|---|
| Username | Username of the target account | |
| Address | Address of the HPE ClearPass server |