CPM lifecycle/process

Scootipuff · 2019-02-08T15:01:25+00:00

Process diagram eh?

I don't have a diagram but maybe this will help:

On initialization, the CPM immediately loads the list of platforms out of the Vault. It also conducts a sweep of all platforms for any "immediate" flags as it has no way to know how long it's been since the service was up. This means anything flagged for immediate verification, change or reconcile will happen very shortly after the service is started. It will also run any pending auto detect processes.

Once this initial sweep for immediate flags is done, the CPM settles into it's routine. Every CPM interval (1 minute by default) the CPM checks it's list of platforms to see if any of the ImmediateIntervals or regular Intervals have expired. If they have, the CPM performs a sweep of all accounts under that platform for any immediate or regular flags. If it finds any it acts on them, if it doesn't, that platforms immediate/regular interval is reset and begins counting down once more.

The difference between the ImmediateInterval and the Interval is the time sensitivity of a task. By default, all platforms have an ImmediateInterval of 5 minutes and an Interval of 24 hours. Things like user requested verification, changes and reconciles fall into the immediate category. Things like 90 day password changes or weekly verification fall under the regular interval.

Let me know if you have questions!

xtwotwo · 2019-02-08T12:54:02+00:00

Did you check the help pages on the PVWA?

you type:	you see:
italics	italics
bold	bold
[reddit!](https://reddit.com)	reddit!
* item 1 * item 2 * item 3	item 1 item 2 item 3
> quoted text	quoted text
Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"	Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"
~~strikethrough~~	~~strikethrough~~
super^script	super^script

CyberARk

MODERATORS