Install and configure a DR CPM

This topic describes how to install and configure a second DR CPM instance to use when the primary CPM is unavailable.

Install the CPM on the DR server

Step 1: Run the CPM prerequisites script

  1. Copy the CPM folder from the installation package to the CPM server, and unzip the folder.

  2. In the InstallationAutomation folder, locate the CPM_PreInstallation.ps1 file.

  3. Open the PowerShell window, and run the CPM_PreInstallation.ps1 file as an administrator.

Step 2: Install CPM

To install CPM using the script file (recommended):

  1. In the CPM\InstallationAutomation\Installation folder, locate and open the InstallationConfig.xml file.

  2. In the InstallationConfig.xml file, specify the following parameters:

    Parameter

    Description

    Username

    The name of the user running the installation.

    Valid values: Username

    Default value: Windows User

    Company

    The name of the company running the installation.

    Valid values: Company name

    Default value: My Company

    CPMInstallDirectory

    The path where CPM is installed.

    Valid values: Pathname

    Default value: C:\Program Files (x86)\CyberArk\

    isUpgrade

    Whether this is a CPM upgrade or a new CPM installation.

    Valid values: True/False

    Default value: false

  3. In a PowerShell window, run the CPMInstallation.ps1 script as Administrator.

  1. On the CPM machine, create a new folder, and copy the Central Policy Manager folder from the installation package to the new folder.

  2. Start the installation procedure by doing one of the following actions:

    • Double-click Setup.exe

    • On systems that are UAC-enabled, right-click Setup.exe, and then select Run as Administrator.

      The Setup window appears.

      Make sure you have closed any open Windows applications.

       

      You can exit installation at any time by clicking Cancel. You can return to the previous installation window by clicking Back, where applicable.

  3. Click Next.

    A list of applications appear that must be installed on your machine prior to the CPM installation.

  4. Click Install.

  5. Read the license agreement, and then click Yes.

  6. In the Customer Information window, enter your name and Company name in the appropriate fields, and then click Next.

  7. In the Destination location window, do one of the following actions:

    • Click Next to accept the default location where the CPM will be installed (displayed in the Destination Folder area).

    • Click Browse, select another location, and then click Next.

  8. In the Setup Type window, select No Policy Manager was previously installed, and then click Next.

  9. In the Vault’s Connection Details window, do not specify the IP address for the Vault. Click Next.

    A message appears asking if you want to continue installation without creating the Vault environment.

  10. Click Yes to confirm and continue.

  11. Click OK to finish the installation.

Step 3: Perform CPM post-installation tasks

There are tasks that you must perform after you have completed the DR CPM installation. For more information, see CPM post-installation tasks.

Step 4: Harden the DR CPM server

You must harden the DR CPM server as you hardened the primary CPM server. For more information, see Harden the CPM server.

Configure the DR CPM

After installation, the CPM Service is started automatically.

To configure the DR CPM:

  1. Stop the CyberArk Password Manager Service, and set the startup type to Manual.

  2. In the Vault’s installation directory (by default, C:\Program Files (x86)\CyberArk\Password Manager\Vault), open Vault.ini, and set the value of the ADDRESS parameter to your Vault’s IP address.