WORKLOAD AUTOMATION COMMUNITY
  • Home
  • Blogs
  • Forum
  • Resources
  • Events
    • IWA 9.5 Roadshows
  • About
  • Contact
  • What's new

Ensuring Passwordless Job Schedulation with CyberArk Integration

5/24/2022

0 Comments

 
Picture
​CyberArk is an identity and access manager offering a wide set of identity security capabilities. You can use it to submit Workload Automation jobs without specifying any passwords, which are retrieved from the CyberArk vault.
Picture
​How it can be integrated with Workload Automation? Simply by using 2 files:
  • the CyberArkVault library file
Picture
  • the CyberArk.ini properties file that needs to be customized
Picture
​The CyberArkVault library file allows you to retrieve the password for a specific user from CyberArk. The password is not stored locally on the Workload Automation workstation, but retrieved from CyberArk while the Workload Automation job is running.
 
There are 2 types of integration methods:
Picture
  1. With the Central Credential Provider (CCP) that starts an HTTPS call to CyberArk Central Credential Provider that manage the accesses.
  2. With the local Credential Provider (CP) that starts a secure call to CyberArk Credential Provider using a proprietary CyberArk library file.
Picture
​6. Edit the CyberArk.ini properties file
Picture
​7. Restart the agent witn StartUpLwa command.
8. Add the necessary accounts in CyberArk, using the dedicated interface
Picture
Job Definitions
There are 2 types of jobs that are eligible to run with CyberArk integration:
 
  • Windows Native Job
Define the job specifying a user managed by CyberArk and defined in the Windows OS too but with empty password (the password will be returned by CyberArk)
Picture
then specify a user by using a query syntax as the follow:
section_name::parameter_name=parameter_value
Picture
  • Job Application Plug-In
 
You can specify the CyberArk user and then using the syntax for password type: ${agent:password.<username>}
 
or you can specify a user by using a query syntax as the follow: section_name::parameter_name=parameter_value;
Picture
Query Syntax building
 
User Syntax:

section_name::parameter_name=parameter_value;...
 
By using the above query user syntax it’s possible to build some examples as follows:
Picture
Picture

Authors Bio
Picture
Andrea Fiore, ​Workload Automation Senior Software Engineer, HCL Technologies

Andrea joined HCL in April 2017 in the Verification&Validation Test team. He works as verification tester for Workload Automation suite both on L3 Support team (in distributed and cloud-native environments) and in Test Team for new releases developing.
He has a master's degree in Computer Science Engineering, with specialization in Automatic and System Engineer.
View my profile on LinkedIn
0 Comments

Your comment will be posted after it is approved.


Leave a Reply.

    Archives

    May 2023
    April 2023
    March 2023
    February 2023
    January 2023
    December 2022
    September 2022
    August 2022
    July 2022
    June 2022
    May 2022
    April 2022
    March 2022
    February 2022
    January 2022
    December 2021
    October 2021
    September 2021
    August 2021
    July 2021
    June 2021
    May 2021
    April 2021
    March 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    September 2020
    August 2020
    July 2020
    June 2020
    May 2020
    April 2020
    March 2020
    January 2020
    December 2019
    November 2019
    October 2019
    August 2019
    July 2019
    June 2019
    May 2019
    April 2019
    March 2019
    February 2019
    January 2019
    December 2018
    November 2018
    October 2018
    September 2018
    August 2018
    July 2018
    June 2018
    May 2018
    April 2018
    March 2018
    February 2018
    January 2018
    December 2017
    November 2017
    October 2017
    September 2017
    August 2017
    July 2017
    June 2017
    May 2017

    Categories

    All
    Analytics
    Azure
    Business Applications
    Cloud
    Data Storage
    DevOps
    Monitoring & Reporting

    RSS Feed

www.hcltechsw.com
About HCL Software 
HCL Software is a division of HCL Technologies (HCL) that operates its primary software business. It develops, markets, sells, and supports over 20 product families in the areas of DevSecOps, Automation, Digital Solutions, Data Management, Marketing and Commerce, and Mainframes. HCL Software has offices and labs around the world to serve thousands of customers. Its mission is to drive ultimate customer success with their IT investments through relentless innovation of its products. For more information, To know more  please visit www.hcltechsw.com.  Copyright © 2019 HCL Technologies Limited
  • Home
  • Blogs
  • Forum
  • Resources
  • Events
    • IWA 9.5 Roadshows
  • About
  • Contact
  • What's new