Conjur Password plugin
This topic describes the Conjur Password plugin and how to configure the plugin.
Support
Target devices
The CPM supports remote account management on the following Conjur applications:
-
Conjur Enterprise 12.6 or later
Accounts
The CPM supports account management for the following accounts:
Platforms
In the PVWA Platform Management page, make sure that the following target account platform is displayed:
-
Conjur Password
Actions
The following table lists the supported password management actions for this platform:
|
Action |
Supported |
Permissions |
|---|---|---|
|
Verify |
Yes |
N/A |
|
Change |
Yes |
N/A |
|
Reconcile |
Yes |
The reconcile account must be an account on the Conjur Keys platform. For more information, see Conjur Keys plugin. The reconcile account has the following requirements:
|
|
Delete |
No |
N/A |
Reconcile account
|
Action |
Supported |
Required |
Platform |
Permissions |
|---|---|---|---|---|
|
Reconcile |
Yes |
No |
Conjur Keys |
The reconcile account must be an account on the Conjur Keys platform. For more information, see Conjur Keys plugin. The reconcile account has the following requirements:
|
Configuration
Prerequisites
-
This plugin requires TLS 1.2 or 1.3. For more information about TLS configuration, see Conjur custom TLS configuration.
-
The Conjur Enterprise application certificate must be installed on the CPM machine.
Import platform
The Conjur plugin is available on the CyberArk Marketplace. Download the package, and import the platform.
Platform parameter
|
Parameter |
Description |
|---|---|
|
OrganizationAccount |
The account name of the Conjur Organization account. This is an API management account for Conjur Enterprise. Required: Yes Default value: None |
Account parameters
Required
|
Parameter |
Description |
|---|---|
|
Username |
The username for the Conjur account. Default value: None |
|
Address |
The address of the Conjur Enterprise environment. For example: ConjurEnterpriseEnvironment.com Default value: None |
