Cyberark (Preview)

Remote Desktop Manager 2024.1 introduces the CyberArk data source (preview) which makes it possible to connect directly to your CyberArk and launch your sessions with ease, without the added complexity of a Devolutions Server or SQL Server data source.

Prerequisites

• Remote Desktop Manager Team edition, version 2024.1 or later.
• CyberArk version 14 or later.
• A Remote Desktop Manager CyberArk integration license.

Adding a new CyberArk data source

1. Navigate to File – Data Sources – Add New Data Source.
2. Select CyberArk (Preview) from the Enterprise section.

   

3. Next, enter your CyberArk connection details.

   

• Name: A unique name for the data source.

• Web services URL: Your CyberArk PVWA host URL.

• Virtual directory: Blank by default.

• Version: Default (V12).

• Authentication Mode: Choose the method by which to authenticate: CyberArk, Windows, LDAP, SAML, or Radius.

• Authentication Credentials: This may be Custom (if you choose SAML as the authentication mode, credentials are not available) where you will enter a Username and Password, or My Account Settings PVWA.

4. Once connected, click on a host or account to see all linked entries and connect as needed.

First connection

On the first connection to CyberArk, Remote Desktop Manager will:

• Import a Platform called Devolutions Remote Desktop Manager (PlatformID: DevolutionsRDM)

• Create a Safe (RDM_Settings)

• Create an account (DataSourceSettings)

You will then be prompted to enter a CyberArk Integration Module license. To request a trial license, click here.

User

In CyberArk, you must manually grant read access to RDM_Settings safe to everyone in the organization that you want to allow using the Remote Desktop Manager CyberArk data source.

Administrator

Administrators are defined as users that have Add Safe privileges. Admin users in Remote Desktop Manager can, respecting CyberArk permissions:

• Edit the Remote Desktop Manager data source System Settings

• Add/Delete CyberArk integration licenses

• Launch CyberArk PVWA directly

Using the CyberArk data source

Now that you have your CyberArk data source configured and authenticated, you can now connect to hosts quickly and easily. There are two ways to connect to a host, starting from an account and selecting the host or from a host and selecting the account. With this flexibility, choose the most efficient starting point for you.

Starting from an account

From an account, you have several options. In addition to the connecting actions, you may choose to edit the Properties (admin account required) which directly opens the Account properties page from the CyberArk PVWA. You may also choose to create a New Entry (admin account required) in the Remote Desktop Manager CyberArk data source which directly opens the New Account page from the CyberArk PVWA. Finally, basic account details are shown in the Overview pane.

There are three ways to connect to a host from an account view.

1. In the Overview – Machines view, double-click on a Machine to connect to. This list is populated from the Suggested Remote Machines listed in the CyberArk PVWA Accounts – Accounts View – (account) – Details screen.

2. Click the Connect button to display a list of machines to connect to. Depending on your CyberArk account settings you are shown either of the following windows. The first option displays if you do not have the Limit access to these machines only option enabled within the Account – Account Properties screen within the CyberArk PVWA. If you have this option enabled, then the second window displays as a drop-down with the list populated from the Suggested Remote Machines on the Account Properties page.

You are shown two panes, a Host field to pick or manually enter the host, or an Remote Desktop Manager vault view of all available hosts to choose from.

With the Limit access to these machines only option checked in CyberArk PVWA for an account, show only the allowed hosts to connect to.

3. Click the Connect to Host button to display a list of machines to connect to. This option bypasses PSM (not recommended), and is only shown if the System Settings – General – Allow to connect to host option is checked. The shown windows reflect the same as in the Connect action, only bypassing PSM.

Starting from a machine

Like an account, you can connect to a host through the connect actions, but here you can only create a New Entry (admin account required) in the Remote Desktop Manager CyberArk data source which directly opens the New Account page from the CyberArk PVWA

Similar to an account, there are three ways to connect to a host from the machine view.

1. In the Overview view, double-click on an Account to connect to a host with. This list is populated by filtering all accounts shown in the Remote Desktop Manager CyberArk data source by their Suggested Remote Machines to create the list of available accounts.
2. Click the Connect button to display a list of accounts to connect as. The Account drop-down reflects the same list as shown in the Overview, while you may use the Remote Desktop Manager CyberArk data source vault view to connect as a different account.

   

3. Click the Connect to Host button to display a list of accounts to connect as. This option bypasses PSM (not recommended), and is only shown if the System Settings – General – Allow to connect to host option is checked. The shown windows reflect the same as in the Connect action, only bypassing PSM.

Data Source Settings

If you have connected using an Administrator account to your CyberArk data source, on the Remote Desktop Manager Administration tab, you are shown three additional options: Licenses, System Settings, and a direct CyberArk PVWA button.

Licenses

Here, you have the option to add, edit, or remove a CyberArk Integration license which is required for a CyberArk data source in Remote Desktop Manager free or team edition.

System Settings

If you open the System Settings, you are shown three different sections, General, PVWA, and System Message. Since the CyberArk data source is a specialized data source, many traditional RDM data source options are not available.

General Page

PVWA Page

System Message

Here, set a message to be displayed on open of the Remote Desktop Manager CyberArk data source or whenever the message is changed.

Troubleshooting

Click here for troubleshooting steps regarding CyberArk data source issues, or contact our support team.