cau - advepv v9x advanced pass management06高級通行證管理

CyberArkUniversity

AdvancedPasswordManagementObjectivesReviewPasswordManagementWorkflowsandConceptsfromBeginnerClass.Learnhowtomanageusages.Learnhowtomanagedatabaseaccounts.Learnhowtoutilizepasswordgroups.Installacustomplugin.Learnhowtosetupabasicticketingintegration.ReviewMasterPolicyPlatformsExceptionsCreatingSafesSafeSettingsSafePermissionsProvisioningAccounts–ManualProvisioningAccounts–AutoDiscoveryProvisioningAccounts–PasswordUploadUtilityVerifyChangeLinkedAccountsLogonAccountUsedwhenauserispreventedfromloggingonbutpasswordisknownUsedonaregularbasis–i.e.itiscommontoblockrootaccessviaSSHA‘superuser’,suchasroot,shouldnotbeusedasalogonaccountReconcileAccountUsedfor‘lost’orunknownpasswordsShouldbeusedinfrequentlyNeedstohaveelevatedprivileges(i.e.DomainAdmin)DualControlUserattemptstoaccesspasswordE-mailisautomaticallysenttoamanagerforapprovalExclusivePasswordOneTimePasswordExclusiveandOneTimePasswordSummaryExclusivepasswordsWhenauseraccessesapassword,theaccountislocked,nootherusercanaccessthepassworduntilithasbeenreleased.UsermustreleasethepasswordmanuallyPasswordischangedautomaticallyuponmanualreleaseOne-timepasswordsAfterauseraccessesapassword,itischangedautomaticallybasedontheminimumvalidityperiodMultipleusersareabletoaccessthepasswordsimultaneouslyMinimumvalidityperiodisresetaseachuseraccessthepasswordExclusive/one-timepasswordscombinedAccountislockedtoasingleuser,nootherusercanaccessitIftheuserdoesnotreleasetheaccountmanually,thesystemwillreleaseitautomatically,basedonMinimumValidityPeriod,andchangethepassword.UsagesUsageBasicsUsagesarestoredinthevaultasaccounts.ServiceAccountPlatformsUsageshavePlatformsjustlikepasswords.ChangingUsagesCPMChangesPasswordCPMScansforUsagesCPMChangesUsagesImmediateInterval=5Interval=1440SearchForUsages=YesImmediateInterval=5Interval=1440DatabaseAccountsDatabaseConnectivity101CPMODBCMSSQLSybaseMySQLTeradataClientFrameworkPlatformDriverConnectionString–DSN-lessDriver={SQLServer};Server=SQL1;Database=pubs;Uid=sa;Pwd=Cyberark1;PlatformSpecificSettingsConnectionString–DSNDriver={SQLServer};DSN=SQL1;Uid=sa;Pwd=Cyberark1;PlatformSpecificSettingsPlatformSettings–ConnectionStringDriver={SQLServer};Server=%ADDRESS%[\%INSTANCE%];Database=%DATABASE%;Uid=%USER%;Pwd=%LOGONPASSWORD%;DatabaseIntegratedAuthenticationIfadatabaseplatformallowsanintegratedlogintype(e.g.WindowsaccountinSQL)storeintegratedaccountsastheirnativeplatform.CyberArkhassomeabilitytoallowoneplatformtoreconcileanother.PasswordGroupsPasswordGroupsPasswordgroupsallowyoutokeepcredentialsinsyncbetweenmultipleaccounts.OracleClusterNodeANodeBNodeCGroupPlatformCreateagroupplatformtoconfigurepasswordchangelogic.Technicalsettingscomefromindividualaccountplatforms.AccountsinagroupdoNOTneedtoallusethesameplatform.CreateaGroupAddAccountstoGroupOneChangetoChangeThemAllCustomPluginsCustomPluginsCustompluginsallowCPMtomanageaccountsorusagesnotsupportedoutofthebox.CustomerpluginsMUSTbeobtainedthroughprofessionalservices.Controlledreleasepluginscanbetestedand