CyberArk Integration

^{Last Updated: 2025-02-03}

Purpose

This article provides set up information on the CyberArk integration.

Introduction

CyberArk enables organizations to securely store and manage passwords, encryption keys, and other credentials. This helps prevent unauthorized access to sensitive systems and information. This article outlines the setup process for integrating CyberArk, a tool for securely managing passwords and credentials. To add a CyberArk integration a PEM-formatted certificate, a .pem file , is required, which can be generated using OpenSSL.

Add New CyberArk Integration

To add a CyberArk integration:

1. Go to Configuration > Integration in the left hand side menu.

2. Click the green icon to open a new integration form.

3. Select CyberArk in the drop-down menu.
   
   

   

   
   

4. Fill in credentials such as Name, URL, Application ID, Default safe, Default folder.
   
   

   

   
   

   
   

5. Click the blue upload button and select a PEM-formatted certificate file. See How to Generate a .pem File with OpenSSL section on how to create a .pem file.

6. Click the blue ADD to save the new integration.

How to Generate a .pem File with OpenSSL?

Prerequisite

You need to install OpenSSL before performing this step.

Generate the .pem File

Follow these steps to generate a .pem file using OpenSSL:

1. Open a command prompt or terminal.

2. Navigate to the directory where you want to generate the .pem file.

3. Run the following command to generate a private key and CSR (Certificate Signing Request) file:
   openssl req -newkey rsa:2048 -nodes -keyout private.key -out csr.csr

4. Follow the instructions to enter the necessary information for the CSR.

5. Next, run the following command to create the .pem file:
   openssl x509 -req -in csr.csr -signkey private.key -out certificate.pem

OpenSSL will be created in the same directory.

Link a CyberArk Integration to an Account

To link a CyberArk integration to an account:

1. Click the Account view in the upper right corner and select Credentials.
   

   

   
   

2. Click the Add Credentials button on bottom right corner.
   

   

   
   

3. Select Web in the drop-down menu.

4. Fill in the credentials.
   
   

   

   
   

5. Fill in CyberArk Object, CyberArk Safe, CyberArk Folder. If any of these are empty, the default value in the previous step is used.

Edit Credentials

To edit account’s integration:

1. Click the Account view in the upper right corner and select Credentials.
   

   

   
   

2. Click on the Edit icon inside account card.
   

   

   
   

3. Change the credentials and click Save.

Troubleshooting

If something goes wrong when using the credentials with integrations when scanning, an error message is displayed in the scan details.