Adding a CyberArk Vault

You can configure a CyberArk vault in Commvault to securely store and manage credentials.

Before You Begin

• Obtain CyberArk server information and credentials.

  1. Create an application with certification authentication.

  2. Provide the Retrieve accounts permission to the application on required safes.

  3. Use the ApplicationId and certificate to configure CyberArk.

• Obtain a .p12 certificate generated by the CyberArk Vault administrator and associated with the required CyberArk Application ID (AppID). This certificate is used by the CommServe or tenant to securely authenticate with the CyberArk Vault. The CommServe or tenant administrator only needs to import the provided .p12 certificate and configure the CyberArk connection.

Procedure

1. From the Command Center navigation pane, go to Manage > Security.

2. Click the Credential vault tile.

3. On the Vault configuration tab, click Add.

4. From the Vendor list, select CyberArk.

5. For Name, enter a name for the CyberArk credential vault.

6. For Server URL, enter the URL for the CyberArk server, including the port number.

7. For Application ID, enter the application ID of CyberArk.

8. For Certificate, click Upload Certificate, browse the SSL certificate, and then upload it.

9. For Certificate Password, enter the password for the certificate.

10. Select an access node for the CyberArk vault.

11. Enter a description, and then click Save.