Password Reconciliation

The following parameters determine the platform settings for reconciling passwords.

RCAllowManualReconciliation
Description Whether or not passwords will be reconciled when a user initiates the procedure manually through the PVWA interface.
Acceptable Values Yes/No
Default Value -
ReconcileAccountSafe
Description

The name of the Safe where the reconcile account is stored or a dynamic rule to specify this value.

Note: The reconcile account Safe, folder, and name can be replaced by a rule that specifies the reconciliation account dynamically.

Acceptable Values Valid Safe name or rule description
Default Value -
ReconcileAccountFolder
Description The name of the folder where the reconcile account is stored or a dynamic rule to specify this value.
Acceptable Values Valid Folder name or rule description
Default Value -
ReconcileAccountName
Description The name of the reconcile account specified in the Safe and folder above or a dynamic rule that specifies this value.
Acceptable Values Valid object name or rule description
Default Value -
RCAutomaticReconcileWhenUnsynched
Description Whether or not passwords will be reconciled automatically after the CPM detects a password on a remote machine that is not synchronized with its corresponding password in the Vault.
Acceptable Values Yes/No
Default Value -
RCReconcileReasons
Description The codes that represent the CPM plugin errors that will launch a reconciliation process.
Acceptable Values Plug-in return codes separated by a comma
Default Value -
RCFromHour, RCToHour
Description The time frame in hours during which the CPM can reconcile passwords, either manually or automatically. This is useful, for instance, if the organization only wishes to allow password reconciliation processes during the night.
This parameter is not relevant if the platform will be applied to a member of an account group.
Acceptable Values 0-23 or -1 for none
Default Value -
RCExecutionDays
Description The days of the week when the CPM will reconcile passwords.
The days of the week are represented by the first 3 letters of their names. Sunday is represented by Sun, Monday by Mon, etc.
Acceptable Values Days of the week, separated by commas.
Default Value -
IgnoreReconcileOnMissingAccount
Description A reconciliation process will be skipped and the account disabled if an account is not linked to a reconciliation account at either platform level or account level.
Acceptable Values Yes/No
Default Value No