Sync-CyberArk-Password-Azure-KeyVault-Secret

KO | EN

gitlite — search

#react #typescript #llm #go #golang #rust #deep-learning #docker #macos #nodejs #kubernetes #vue #pytorch #mcp

Sync-CyberArk-Password-Azure-KeyVault-Secret

(★ 9)

Push / Update CyberArk Passwords to Azure Key Vault

Sync-CyberArk-Password-Azure-KeyVault-Secret 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Sync CyberArk Passswords in Azure KeyVault
This CyberArk CPM plugin can push or update or sync passwords from CyberArk Vault to Azure Key Vault.

[Prerequisites](#prerequisites)

[Configuration](#configuration)

[Add Azure Key Vault Usage](#add-azure-key-vault-usage)

#### Prerequisites
1. [Azure Az PowerShell Module] (https://docs.microsoft.com/en-us/powershell/azure/install-az-ps?view=azps-8.0.0)
2. PowerShell version v5.0+
3. CyberArk CPM - TPC
4. Download the package and place below files in the CPM bin folder
- UpdateAzKVProcess.ini
- UpdateAzKVPrompts.ini
- Update-AzKV.ps1
5. Azure AD or AD account with permission to update the secret in Azure Key Vault
6. Connection from CPM server to Azure (https://portal.azure.com)

## Configuration

#### Add KeyVaultName and SecretName File Category in Vault Server
1. Login to PrivateArk Client and click on File -> Server File Categories

![PrivateArk Client File Menu](https://raw.githubusercontent.com/TheMediocreCoder/Sync-CyberArk-Password-Azure-KeyVault-Secret/main/docs/images/PrivateArk_Client_File_Menu.jpg)

2. Add 2 new TEXT type File Category by clicking on New button and name them as KeyVaultName and the next one as SecretName

![Add New File Category](https://raw.githubusercontent.com/TheMediocreCoder/Sync-CyberArk-Password-Azure-KeyVault-Secret/main/docs/images/Add_New_File_Category.jpg)

#### Create New Service Account Platform
1. Using PrivateArk Client, Retrieve & Safe Policies.xml from PVWAConfig Safe. Edit the Policies.xml and add XML code from Add_Policies.xml (usage) to Policies.xml, inside the Usages tag.
![New Service Account Platform](https://raw.githubusercontent.com/TheMediocreCoder/Sync-CyberArk-Password-Azure-KeyVault-Secret/main/docs/images/Add_Service_Platform_to_Policies_xml.jpg)

_Note: Ensure you keep a backup of Policies.xml_

#### Add Service Account Platform or Usage to the Account platform
On the desired platform add the Usage Update-AzKV and ensure SearchForUsage is set to Yes.
1. To add the Usage. Login to PVWA as a Vault Admin, Navigate to Administration -> Platform Management -> Select the platform and Edit it. Expand UI & Workflows -> Right click on Usages and Add Update-AzKV

![Add Usage to Platform](https://raw.githubusercontent.com/TheMediocreCoder/Sync-CyberArk-Password-Azure-KeyVault-Secret/main/docs/images/Add_Usage_To_Platform.jpg)

2. To check SearchForUsages, Edit Platform -> Automatic Password Management -> General

![Enable SearchForUsages](https://raw.githubusercontent.com/TheMediocreCoder/Sync-CyberArk-Password-Azure-KeyVault-Secret/main/docs/images/Enable_SearchForUsages.jpg)

## Add Azure Key Vault Usage
Once you have enabled the Update-AzKV Usage at platform level.
1. Open the Account (in classic interface) whose password you want to push to Azure Key Vault
2. Click on Update-AzKV

![Enable SearchForUsages](https://raw.githubusercontent.com/TheMediocreCoder/Sync-CyberArk-Password-Azure-KeyVault-Secret/main/docs/images/Enable_SearchForUsages.jpg)

3. Add a usage with the details Key Vault Name & Secret Name

![Added Usage to Master Account.jpg](https://raw.githubusercontent.com/TheMediocreCoder/Sync-CyberArk-Password-Azure-KeyVault-Secret/main/docs/images/Added_Usage_to_Master_Account.jpg)

4. Associated the logon (Azure AD or AD) account which has permission to update the secret in the Azure Key Vault

![Associate Logon Account And Push](https://raw.githubusercontent.com/TheMediocreCoder/Sync-CyberArk-Password-Azure-KeyVault-Secret/main/docs/images/Associate_Logon_Account_And_Push.jpg)

5. Click on the Change button in the usage to test the push / update operation.

If SearchForUsage is set to Yes, on the next CPM performed password change, the password will be automatically updated in the Azure Key Vault.

Sync-CyberArk-Password-Azure-KeyVault-Secret

Sync-CyberArk-Password-Azure-KeyVault-Secret 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Sync-CyberArk-Password-Azure-KeyVault-Secret

Sync-CyberArk-Password-Azure-KeyVault-Secret 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README