Defining Guardium datasources to access CyberArk

Configure the datasources on your Guardium® system for automatic password provisioning. You can create a new datasource definition or edit an existing definition.

Before you begin

Obtain the CyberArk objectname from your CyberArk administrator for each corresponding Guardium datasource.

Procedure

  1. To access an existing datasource definition, go to Setup > Tools and Views > Datasource Definitions, and click Edit Datasource Definition. To create a new datasource definition, see Creating a datasource definition.
  2. Configure the Credential type by selecting the External password radio button.
  3. In the External password type Location drop-down, select CYBERARK.
  4. In the CyberArk config drop-down, select the name of the CyberArk configuration that contains the Guardium datasource credential. For more information, see Configuring CyberArk on your Guardium system.
  5. In the CyberArk object name Location box, enter CyberArk objectname that corresponds with the Guardium datasource credential.
  6. Click Save.
  7. Click Test connection to ensure that the Guardium system can connect to the CyberArk vault and fetch the datasource credential.

What to do next

Repeat steps 2 to 7 to configure all your Guardium datasources to access CyberArk.

Note: To provision passwords with no manual intervention, ensure that the CyberArk administrator enabled automatic management for your Guardium system's account. If your database is not supported, you can continue to store your credentials on CyberArk. However, the passwords are not automatically provisioned.