Install and configure a DR CPM
This topic describes how to install and configure a second DR CPM instance to use when the primary CPM is unavailable.
Install the CPM on the DR server
Step 1: Run the CPM prerequisites script
Copy the CPM folder from the installation package to the CPM server, and unzip the folder.
In the InstallationAutomation folder, locate the CPM_PreInstallation.ps1 file.
Open the PowerShell window, and run the CPM_PreInstallation.ps1 file as an administrator.
Step 2: Install CPM
To install CPM using the script file (recommended):
In the CPM\InstallationAutomation\Installation folder, locate and open the InstallationConfig.xml file.
In the InstallationConfig.xml file, specify the following parameters:
The name of the user running the installation.
Valid values: Username
Default value: Windows User
The name of the company running the installation.
Valid values: Company name
Default value: My Company
The path where CPM is installed.
Valid values: Pathname
Default value: C:\Program Files (x86)\CyberArk\
Whether this is a CPM upgrade or a new CPM installation.
Valid values: True/False
Default value: false
In a PowerShell window, run the CPMInstallation.ps1 script as Administrator.
On the CPM machine, create a new folder, and copy the Central Policy Manager folder from the installation package to the new folder.
Start the installation procedure by doing one of the following actions:
On systems that are UAC-enabled, right-click Setup.exe, and then select Run as Administrator.
The Setup window appears.
Make sure you have closed any open Windows applications.
You can exit installation at any time by clicking Cancel. You can return to the previous installation window by clicking Back, where applicable.
A list of applications appear that must be installed on your machine prior to the CPM installation.
Read the license agreement, and then click Yes.
In the Customer Information window, enter your name and Company name in the appropriate fields, and then click Next.
In the Destination location window, do one of the following actions:
Click Next to accept the default location where the CPM will be installed (displayed in the Destination Folder area).
In the Setup Type window, select No Policy Manager was previously installed, and then click Next.
In the Vault’s Connection Details window, do not specify the IP address for the Vault. Click Next.
A message appears asking if you want to continue installation without creating the Vault environment.
Click Yes to confirm and continue.
Click OK to finish the installation.
Step 3: Perform CPM post-installation tasks
There are tasks that you must perform after you have completed the DR CPM installation. For more information, see CPM post-installation tasks.
Step 4: Harden the DR CPM server
You must harden the DR CPM server as you hardened the primary CPM server. For more information, see Harden the CPM server.
Configure the DR CPM
After installation, the CPM Service is started automatically.
To configure the DR CPM:
Stop the CyberArk Password Manager Service, and set the startup type to Manual.
In the Vault’s installation directory (by default, C:\Program Files (x86)\CyberArk\Password Manager\Vault), open Vault.ini, and set the value of the ADDRESS parameter to your Vault’s IP address.