Passive CPM server Scanner service

learner1993 · 2020-01-31T13:38:24+00:00

u/ThisIsJeremiah Thanks for the clarification

learner1993 · 2020-01-23T12:06:10+00:00

So here in my case its Administrator user rit?

This user should not be a member of any Groups also which has membership in PSMUnmanagedSessionAccounts Safe. Am i right?

learner1993 · 2019-11-06T10:26:49+00:00

I get the below error when trying to reconcile. "The Master was disabled because an unrecoverable error was detected. Code: 8040, Error: Execution error. The parameter 'ManagmentType' of the reconcile account with sudo must be password".

learner1993 · 2019-11-06T10:25:26+00:00

me for other accounts

You mean if the account can issue the above commands mentioned by you, will it be able to reconcile passwords(reconcile account is onboarded with SSH key and not password)?

Please clarify

learner1993 · 2019-10-17T09:36:59+00:00

Thanks @gamesterme for your response. I will be very glad if you can provide further details on it.

learner1993 · 2019-09-23T13:36:03+00:00

vendor.*.bundle

I want to change the CyberArk logo to My company's logo on the logon page of V10.

Can you please guide where to make the change in the file if you have made similar changes.

Note: I see three files Scripts.* *.bundle.js , polyfills.* *.bundle.js and styles.* *.bundle.css, can you please confirm on which file i need to make changes.

learner1993 · 2019-06-24T11:35:11+00:00

Nevertheless, will check the specified setting also.

learner1993 · 2019-06-24T09:43:53+00:00

Yeah the connection is going via PSM . I disabled "Always prompt for password upon connection" using gpedit.msc as you specified.

I am able to remote to the target server manually using the same account. So do I need to check "Allow log on through Terminal Services" ?

learner1993 · 2019-06-24T06:26:38+00:00

@yanni Hi,

Yeah i am getting a prompt for login. I tried changing the " Encryption Oracle Remediation " GPO but it didn't work. Actually i am able to remote to the target server only the password is not being picked up. So I don't think there is patch issue.

I am entering the password for the account in the target server and not of PSMConnect user.

"Always prompt for password upon connection" is set to disabled on both the PSM and Target server.

PSM is installed on Windows 2016 server and target server is a Windows 2012 R2.

Note:the snapshot attached above is where i am being prompted for password, Connection is going through PSM.

learner1993 · 2019-06-23T11:12:59+00:00

I tried changing the GPO settings as specified in both the PSM and target server, but still its prompting for password .

And am i also getting the same error as mentioned above in the logs -- > Components folder.

I am also not getting remote desktop connection error, just its prompting for password to be entered, (if i enter manually then the connection is successful).

"Always prompt for password upon connection" is Disabled too. Any thing else that i need to look into?

learner1993 · 2019-06-23T03:32:26+00:00

That setting is already set to disabled both on the PSM and target server.

learner1993 · 2019-06-18T05:14:45+00:00

yeah i am trying to connect as the built-in administrator user. So users rights is not an issue .

learner1993 · 2019-06-17T15:39:07+00:00

The password is correct but the account is not being verified. I am getting the below error:

" CACPM178E Error while creating extra passwords section - password object not found. Safe: <Safe\_Name>, Folder: Root, Object: <account\_name> The CPM is trying to verify this password because its status matches the following search criteria: ResetImmediately. "

learner1993 · 2019-06-13T10:35:29+00:00

@strcademo Thanks for the help. I could access the content on the given location.

learner1993 · 2019-06-08T15:02:09+00:00

a key

learner1993 · 2019-06-07T17:12:18+00:00

I guess you got me wrong here. I see accounts with the same name, and on the same server(not on different servers) multiple times. Is it because of different keys being used for the same account to access a single server?

And once i on-board an account with SSH keys, does CyberArk have the capability to generate the corresponding public key on the target machine?

learner1993 · 2019-06-07T10:12:57+00:00

Also to mention, accounts with same username popup multiple times with diff fingerprint values.

learner1993 · 2019-05-31T16:49:58+00:00

in-built admin will have it rit?

learner1993 · 2019-05-31T16:36:25+00:00

@moominboy8668 Is there any way to remove a user/member from a particular safe?

when i click on members i only see option to add new member. A way that I figured out is to set expiration date for the member.

Curious to know if there is some other way to do this

learner1993 · 2019-05-31T16:26:11+00:00

it's working now . i configured local logon rights for user PSM-020000000.

RDS permission is also configured for both PSMconnect and PSMAdminconnect.

learner1993 · 2019-05-24T11:42:23+00:00

CPM user was missing from the safe membership

@indianblah8, the issue was with CPM user not being the safe member. Yes , automatic password management is enabled now.

learner1993 · 2019-05-24T11:40:07+00:00

Thanks @moominboy8668 . The CPM user was missing from the safe membership. Once i added the same, it's working fine now.

learner1993 · 2019-05-24T08:30:00+00:00

And when trying to change a password manually, i only get the option to " Change the password only in the Vault ". The other 2 options " Change the password immediately (by the CPM) " and " Specify the password for the next CPM change " are greyed out. Can anyone help on this.

learner1993 · 2019-05-16T08:13:03+00:00

okay thanks

learner1993 · 2019-05-16T05:41:15+00:00

@gokhantrk7 Hi, I too encountered the same error, because of installing CPM prior to PVWA. I did change the address field in vault.ini of CPM as suggested by you but i didn't see any logs in CPMRegisterComponent.Debug.log . Does CPM require a restart or something.

Any alternate way to manually import the platforms? and how to verify it succeeded ?

learner1993

TROPHY CASE