u/TemperatureSignal199

Hello
We have Two Accounts that share the same hostname and username and safe. A RedHat

One RedHat is using platform access with SSH (same user) while the other platform uses RDP.

Both inside same group in PVWA. We want SSH account to change the password on the RedHat and give it to RDP account. RDP account does not need to change anything on RedHat , just gets the password from SSH as text in pvwa

The point since both are the same same hostname and username but one uses rdp and unix, we cant have them both change the password in the group, since once one will change it the other will lose it. So shh change, rdp gets it in the pvwa.

I know that I need to do something in the Platfrom, one is ssh and the other rdp but just connect. I'm not sure what exactly I need to touch.

Thank you

The pvwa at first start well, then whatever I do as xpath it just fails.

The problem is the manual test works without an issue.

after login it gets stuck here

ERROR -> HTMLPageController :: FindElement -> Timeout error. Element '//span[contains(@class,'fi-setting')]' was not found in new page.

ERROR -> HTMLPageController :: FindElement -> Timeout error. Element '//a[.//span[contains(@class,"fi-setting")]]' was not found in new page.

ERROR -> HTMLPageController :: FindElement -> Timeout error. Element '//a[@data-toggle='dropdown' and .//span[contains(@class,'fi-setting')]]' was not found in new page.

ERROR -> HTMLPageController :: FindElement -> Timeout error. Element '//*[@id="navigation"]/div/div[1]/div[2]/div[2]/ul/li[8]' was not found in new page.

and every single one of the above works fine with a manual test.

CANetPluginInvoker.exe user.ini ChangepassCyberArk.Extensions.Plugin.WebApp.dll True

The platform is webapp and already copied from a working one. Already tried playing with timeout and why not.

Even if I put something before the above commands the PVWA will go on until it hit those above, while manual test will work with no problem.

Already did Get-ChildItem -Recurse | Unblock-File

Thank you

I have a Cisco Partner account, and I'm interested in preparing for the CCNP Security Core (350-701 SCOR)exam, particularly the ASA topics, as well as the 300-710 SNCF exam for the Firepower portion.

Unfortunately, I'm finding the Cisco Partner portal quite confusing. Could someone point me to any free training course available to Cisco Partners, if they exist? I'm specifically looking for structured learning materials covering ASA and Firepower.

I've had a hard time navigating the portal. Compared to other vendors' partner websites, all I've been able to find are generic, not technical courses. I haven't found any comprehensive, well-structured training that explains the technologies in depth.

if there are non for partners, what are the best paid courses for it? Udemy? INE? Cisco offer something paid?

Any guidance or recommendations would be greatly appreciated.

I have a Cisco Partner account, and I'm interested in preparing for the CCNP Security Core (350-701 SCOR)exam, particularly the ASA topics, as well as the 300-710 SNCF exam for the Firepower portion.

Unfortunately, I'm finding the Cisco Partner portal quite confusing. Could someone point me to any free training course available to Cisco Partners, if they exist? I'm specifically looking for structured learning materials covering ASA and Firepower.

I've had a hard time navigating the portal. Compared to other vendors' partner websites, all I've been able to find are generic, not technical courses. I haven't found any comprehensive, well-structured training that explains the technologies in depth.

if there are non for partners, what are the best paid courses for it? Udemy? INE? Cisco offer something paid?

Any guidance or recommendations would be greatly appreciated.

Hello,
For business reason I need to have an account on CyberArk with a predefined username but the password must be prompted  during login. Its a Unix target with PSM-SSH.

maybe somewhere i can modify PSM-SSH itself?

Following:
https://docs.cyberark.com/pam-self-hosted/latest/en/content/pasimp/configuring-accounts-to-provide-specific-connection-methods.htm

in particular
https://docs.cyberark.com/pam-self-hosted/latest/en/content/pasimp/configuring-accounts-to-provide-specific-connection-methods.htm#SupportnonprivilegedSSO

but its not working. everytime I test it still puts the username and password automatically. I disabled EnablePrivilegedSSO, I tried to enable/disable Use PersonalPassword but still no luck.

tried both Support non-privileged SSO and Support ad hoc connections (user in the Vault, but with no password).

Thank you.

Does CyberArk provide a PAM/PSM connector for Amazon WorkSpaces Client?

Specifically, I'm referring to connecting to Amazon WorkSpaces using the native WorkSpaces client from Windows over WSP (port 4195) or the legacy PCoIP (port 4172) protocol.

I couldn't find any PAM/PSM connector in the CyberArk Marketplace (only an EPM integration for WorkSpaces Bundles). Does a supported connector exist, or would this need to be custom-developed?

Hello,

we have an xrdp account.

xrdp from local pc works. xrdp from psm works. xrdp from pvwa webpage returns a black screen with x cursor.

From the logs I only see:

 PSMRD009I Property [Enable CredSSP support] was not found in password specifications. Reason: PSMSC100E Key [EnableCredSSPSupport] was not found in map (Code: -1, -1)

 PSMRD008I Property [Enable CredSSP support] was not found in client specifications. Reason: PSMSC100E Key [EnableCredSSPSupport] was not found in map (Code: -1, -1)

 PSMRD085I Event named [RDPConnectedEvent] is duplicated by the audit transfer job

 

What could it be? we are using PSM 14.2 and Rest of CyberArk is 14.0 . Does 14.0/ 14.2 use a custom RDP version for some reason?

The account is configured as

PSM-RDP

Username: user

Address: Host

Log On To: Host

IP: IP

 

Other xrdp accounts work fine.

 Thank you.

Is anyone else experiencing this in the last two or three days? CyberArk Community keeps asking to login to view threads, and the login randomly fails sometimes and works other times?

The certificates for the Vault, PTA, and PVWA are expiring soon.

For the PVWA, we are already using the certificate provided by the load balancer, so there is no issues there (same certificate currently used by the PSM too).

1. The Vault certificate is going to expire. What would be the impact if we do not renew it? Also, is it really necessary to restart the PrivateArk service on the Vault after replacing the certificate? In addition, can we use the same certificate provided by the load balancer, similar to the certificates used for the PVWA and PSM? Must be  signed by a certificate authority or is it ok to use default self-signed certificate?
2. The PTA is currently not in use, and we would like to understand the impact of not renewing its certificate. Would it also be acceptable to use the same certificate provided by the load balancer? Must be  signed by a certificate authority or is it ok to use default self-signed certificate?
3. Is there any specific documentation available on how to replace certificates for the different CyberArk components, specifically the Vault and PTA?

Thank you