How to Add CyberArk Credential for Protocols from JMX

For the protocols that do not have the CyberArk related fields available after you enable CyberArk integration from the UCMDB Server, you can add CyberArk credential for these protocols with the help of JMX methods.

  1. Export the existing credential.

    1. On the UCMDB Server, launch the Web browser and enter the following address: https://localhost:8443/jmx-console. You may have to log in with a user name and password.
    2. Click UCMDB:service=DiscoveryManager to open the JMX MBEAN View page.
    3. Locate the exportCredentialsAndRangesInformation operation. Do the following:

      • Enter your customer ID (the default is 1).

      • Enter a name for the exported file.

      • Leave the password field empty.

      • Set isEncrypted=False since we want to edit the exported file and import it back later.

      • Set includeProbeRange=True
    4. Click Invoke to export.

      When the export process completes successfully, the file is saved to the following location: C:\UCMDB\UCMDBServer\conf\discovery\<customer_dir>.

  2. Add CyberArk credential to the exported file.

    1. Navigate to the C:\UCMDB\UCMDBServer\conf\discovery\<customer_dir> directory.
    2. Open the exported file using a text editor.
    3. At the end of the file, before the last </object> tag, manually add the following:

      <attribute name="external_vault_type" type="string">CyberArk</attribute><attribute name="external_password_static_key" type="string">HPSupportSafe\Root\support-cyberrk-refid</attribute></object>
    4. Save the file.
  3. Import the updated credential file back to UCMDB.

    1. Go to the JMX Console.
    2. Click UCMDB:service=DiscoveryManager to open the JMX MBEAN View page.
    3. Locate the importCredentialsAndRangesInformation operation. Do the following:

      • Enter your customer ID (the default is 1).

      • Enter a name for the exported file.

      • Leave the password field empty.

      • Set isEncrypted=False since we want to edit the exported file and import it back later.

      • Set includeProbeRange=True.
      • Set notAllowOverlap=False.
    4. Click Invoke to import.