Скачать или смотреть Day 1 Vault Theory

Agenda:
What is Vault?
Main Component of CyberArk PAM.
Used to store the accounts, passwords, business details etc.
Session Encryption Firewall -Which will allow the communicationconnection to Vault on port 1858
Today's Topics:

Vault Installation Pre-requisites\Requirements:

System Requirements:

1. Windows Server 2016\2019\2022
2. .netframework 4.8
3. Windows Server must be part of Workgroup
4. Uncheck all network items except IPV4 &IPV6

Software Requirements:
1. Server_(Main Vault Software\ PrivateArk Server)
2. Client \ PrivateArk Client - An Agent\thick-client which is used to connect to Vault.
3. Operator Keys\CD - These keys are required to start the Vault Server.

What's there inside the operatorcd?
server keys
recpub key

4. Master CD - Fetch the credential from Vault Server.

What's there inside the master cd?
server keys
recpub key
recprvkey

5. License - To install the Vault...

Note - Master Keys\CD This is not used during the Vault Installation, only used in disaster scenario\emergency situation...like Administrator got suspened in thi situation and when you need to restore the Vault\recover the vault data.

__________________________________________________________________________________________________

1. Main configuration File of Vault: DBParm.ini

2. Main Log File of Vault: ITAlog.log

3. Vault Main Services: 6 Services will be created

CyberArk Event Notification Engine - Used for sending the notification\alerts to you.
CyberArk Logic Container - Contains the Vault- Master Policies\Settings.
CyberArk Windows Hardened Firewall - Used to enhance the security of Vault Server... and this service only gets created\takes the ownership of Windows Firewall when you're performing the hardening of Vault...
PrivateArk Database - Used by Vault Application to connects to its database\internal memory.

Which database is used by Vault internally for processing\functioning? -- MySQL

PrivateArk Remote Control Agent - Used to take the remote of Vault...
PrivateArk Server - This is Main vault Service, using this you can start\stop the vault..

What 3 Default Safes\Locker you will get when you installed the vault? (Sentry PAM L3)

1. VaultInternal - Contains the configuration related to LDAP...
2. System - This contains the main configuration, log files and license of Vault
3. NotificationEngine - Contains the default method\template which are used to send the notification \alerts …