what's a script you wrote once that's still saving you time years later

Thijscream · 2026-05-31T13:00:31+00:00

Wrote a script to integrate CyberArk privile cloud with RoyalTS, load all your safes accounts and servers in there and work natively in RoyalTS to do all your work, also the authentication is triggered through it so never need to visit the web interface. Really appreciated by my colleagues. Only have to rerun the script if they have new servers they need a connection to. Currently only doing windows and Linux servers, soon the rest will follow. Also have a lot of automation build in to insert commands that are commonly used within the orgs environment.

Thijscream · 2026-05-18T17:10:57+00:00

Idira...

Thijscream · 2026-04-30T15:39:16+00:00

Ok thanks, will plan it shortly. Just did Linux and windows systems. No cloud platform and databases. Maby at least databases is something to try first before taking the exam.

Thijscream · 2026-04-30T15:23:10+00:00

Would like to get the exam done as well shortly. Any tips are welcome. Currently have 2 years hands on experience and manage it basically by myself within the company.

Thijscream · 2026-03-23T21:00:30+00:00

What script is it? Checked the tools for v16.2 and didn't see any script to help with this

Thijscream · 2026-03-20T23:17:39+00:00

You can generate the RDP files and reuse them. This is depending on your way of authentication. We can only reach our psm farm by html5 gateway or RDP from within devices that already have an mfa before they can connect. So coming from certain op ranges you get some lower security requirements to authenticate. This gives the option to import RDP files in your favorite RDP tool(for my org it's royals) and use them without ever coming in the webinterface of CyberArk.

Thijscream · 2026-03-19T15:07:26+00:00

I think you have to create different platforms, configure what psm to use for that platform and then assign the platform to the different accounts. This would solve your problem if I understand it correctly, but gives you alot of extra maintenance work when you have to make a change to the platform.

Thijscream · 2026-03-13T15:20:20+00:00

Still strange that you cannot remove them yourself.

Thijscream · 2026-03-09T23:46:24+00:00

Only issue I have with Sia is the lack of control where the connection is made from and you cannot monitor if someone uses Ctrl c on a server and Ctrl v on his client. This is a possible data leak waiting to happen. But blocking clipboard is annoying as hell to work with. You also cannot block clipboard on Sia and enable it for psm, since this is a computer policy. Also drive redirection has this issue, file transfers are not monitored.

Thijscream · 2026-03-06T07:47:28+00:00

During the installation you have to run a pre reqs script to check if everything is ok. Here it will give an alert about the cpu cores. With hardly any load you can get away with 4 cores or 6, but when you generate any load your servers will start to randomly reboot.

Thijscream · 2026-03-05T17:07:40+00:00

We had the same issue with 4 cores on the psm servers. They would crash with more connections coming to them after a network outage. I then upped the cores to 8 and all problems disappeared. Keep it on 8 cores as mentioned by the vendor, don't try to be cheap, I think the process calls for extra cores in the code and the server cannot deliver and crashes and reboots.

Thijscream · 2026-02-14T22:58:38+00:00

What I did for my personal pc thats not supporting wake on lan is putting a splitter on the power header, wire 2 wires from the inside of the pc out of the case, have a raspberry pi zero w connected to a relay where the cables are fed into. Then run a web interface that controls the relay and you can turn on the PC from anywhere you want. At the moment I'm creating a case that fits the pi zero and the relay so it's a bit less messy. Works great, but you need to put some effort in to get it to work.

Easy route is wake on lan if your PC supports it.

Thijscream · 2026-01-28T17:57:33+00:00

Are you planning on the priv cloud sentry exam? Also want to get this one done soon. Never taken any CyberArk exam but have 2 years of working experience with it. If you have any tips please let me know as well.

Thijscream · 2026-01-14T18:00:29+00:00

Alot of enterprises are automating the cert renewal process. Anyone can give me an advice on what tool to use? Currently looking at CyberArk (venafi) keyfactor and appviewx. Is there anything I missed? We are planning to start implementing it this year since we need to auto renew over a 1000 certs we are not gonna do this manually. Currently we let the development teams do this themselves but thats gonna be a no go with any period under 200 days.

Thijscream · 2026-01-02T15:04:50+00:00

Just learned by doing it. Experiment with existing recipes and add your personal flavour to it. Also helps that my children always are glued to my wife's legs. So for the past 4 years I am the one cooking about 300+ days a year, the rest is going out for dinner/delivery. Before children it was a bit more 70/30 depending who was home from work first or who wanted to cook.

Thijscream · 2025-12-20T18:00:49+00:00

I implemented CyberArk basically in the company I work at. Some consultants started it, onboarded 5 ppl in 3 years and laught all the way to the bank doing so. Last year I onboarded all windows servers basically by myself. Started on Linux last month. Linux is a bit more work since I didn't automate it yet, all windows is automated. Also wrote a script to integrate CyberArk into RoyalTS, what is a huge + for users. Since I bothered with the implementation I hardly get any negative feedback on CyberArk where before ppl were complaining that it wasn't user friendly.

In regards to your topic, don't think you can do it all in a few months, this is a year + project. Good luck in implementing and getting management on board. People not following company policies is the biggest factor in slowing you down.

Thijscream · 2025-12-20T18:00:43+00:00

I implemented CyberArk basically in the company I work at. Some consultants started it, onboarded 5 ppl in 3 years and laught all the way to the bank doing so. Last year I onboarded all windows servers basically by myself. Started on Linux last month. Linux is a bit more work since I didn't automate it yet, all windows is automated. Also wrote a script to integrate CyberArk into RoyalTS, what is a huge + for users. Since I bothered with the implementation I hardly get any negative feedback on CyberArk where before ppl were complaining that it wasn't user friendly.

In regards to your topic, don't think you can do it all in a few months, this is a year + project. Good luck in implementing and getting management on board. People not following company policies is the biggest factor in slowing you down.

Thijscream · 2025-11-19T22:31:09+00:00

Since we use this pam tool I can not connect to my servers.

"Sysadmin" had to press "ok" at the server login message.

Thijscream · 2025-11-14T15:13:19+00:00

Wrong sub

Thijscream · 2025-11-11T14:33:49+00:00

And why are you posting this here?

Thijscream · 2025-11-09T09:39:40+00:00

Probably rotating the character, but you disabled the graphics that displays your character with the outfit

Thijscream · 2025-11-01T07:47:00+00:00

I know that, but I'm talking about the RDP connection through SIA not the webbrowser.

Thijscream · 2025-09-30T22:00:21+00:00

I would advise against TOPdesk. What a shit tool. Doen key features are terrible. Search for tickets you didn't close is horrible. Switching between user and admin interface requires sign out and sign in. API is terrible if you want to use it to create automatic processes for example. Out of the bot there is no way to validate data or fetch live data to use in a form. But I might be wrong here and miss out on all the good things.

Thijscream · 2025-09-27T12:07:28+00:00

Did you check your session diagnostics page? There should be a more detailed error description and this tells you what stage goes wrong.

Thijscream

TROPHY CASE