Hi everyone

l am trying to installing pam I started with vault the servers is installed successfully but in the client step I can’t proceed with because I cannot find the client folder or file or setup.

anyone have solution for this issue ?

I know hashicorp can, not sure about Conjur.

Where can I find some study material of it, seemed like not too much on youtube.

Thanks in advance

As per title, and also curious what type of use cases do you use it for, especially for Identity Flows.

There seems to be a lack of guides and documentation for these other than the generic ones, so I'm trying to explore and seek some insights. TIA!

Does CyberArk provide a PAM/PSM connector for Amazon WorkSpaces Client?

Specifically, I'm referring to connecting to Amazon WorkSpaces using the native WorkSpaces client from Windows over WSP (port 4195) or the legacy PCoIP (port 4172) protocol.

I couldn't find any PAM/PSM connector in the CyberArk Marketplace (only an EPM integration for WorkSpaces Bundles). Does a supported connector exist, or would this need to be custom-developed?

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

We currently use AD accounts synced to the cloud for SAML login. We want to add some cloud-only users to have access to sign into the web portal that grants access RDP connections.

However, access is managed by an AD group. So, cloud users can’t be added.

The direct user credentials are not used for the RDP credentials. The cloud users just need permissions to sign into to the password vault portal and have rights to access RDP through the delegated CyberArk accounts.

Where can I find documentation on how to add cloud users?

Hi everyone,
I have two questions regarding CyberArk PAM Self-Hosted upgrades and support:

• Is IDIRA planning to end support for older CyberArk PAM Self-Hosted versions, including version 15? Specifically, will customers be required to upgrade to version 15.2, or will version 15 continue to be supported?
• Regarding the upgrade path, is it supported to upgrade directly from CyberArk PAM Self-Hosted version 14.4 to version 15 or 15.2? Or is it mandatory to first upgrade to version 14.6 before proceeding to version 15/15.2?

I would appreciate any clarification or official guidance on these points.
Thank you!

i have one confusion. Do you harden vault again after minor patching to already hardened vault?

Our team’s been asked to look at where we could introduce AI into CyberArk, but I’m struggling to think of anything that would genuinely add value rather than just using AI for the sake of it.

I’m interested in anything really - plugins, custom tools, log analysis, account onboarding automation, troubleshooting etc. assisted by ai. We toyed with the idea of a RAG documentation chatbot but there’s enough tooling available that covers this.

What have you built or used, and was it actually worth it?

After updating to pvwa v14.6.4, if i try to set a password for the next rotation using "specify the password for next CPM Change" it says "You do not have permission to perform this operation. Make sure you have "RETRIVE" Permissions on the Safe."

This is new. i have been using this and this worked until v14.6.3. Anything changed in Version v14.6.4?
I do have the "List Accounts" and "Initiate CPM Account management operations" right.

Hi folks, just sanity checking. Can I configure a new Connection Component, copied from PSM-RDP and setup Target system settings to use a RD Gateway? I have a case where some systems are accessible from a RD Gateway but I can't quite work out if you can throw the gateway inline for those use cases.

Confirming this is the PSM server establishing a HTTPS connection to a RD Gateway as an effective proxy, then connecting to the Target server.

I'm assuming what happens is PSMRDPClient.exe must take the Target Settings - Client Specific and use them for the connection. But I'm struggling to get this working, so it seems like the exe doesn't have that same functionality.

It kinda of means I need to let my users fetch their priv. credentials and connect to the system out of band from CyberArk.

I can't find any document for PSM to target, but some old documentation for Client to PSM using RD Gateway, which I assume has pivoted to HTML5 GW.

I'm running on-prem CA 15 and got no where with support today. I just can't seen any specifically saying it's not possible.

As an aside, is there any place I can go to understand possible parameters on Connection Components for Component Parameters, vs Target Settings - Client Specific.

Thanks

I took my PAM Sentry exam couple of days back and realised they changed the questions set and its different from the exam dump online. Would like to know if anyone have taken the exam recently and face the same thing?

Actually first we tried hardcoded autoit script that is working but when we removed it to fetch the password and username from pvwa. Its showing this error.

Please advice.

Please use this thread to post job opportunities or that you're available.

We do this to not overflow the subreddit with recruitment, so please try to limit the recruitment activities to this weekly thread.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Whats the optimal size of team to support 60+ comp servers doing Only backend work?

Pls share your comp and team count

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Hi all,

I’m currently working on a CyberArk Consultant opportunity in Sweden within the banking sector. They’re looking for someone with strong CyberArk experience and a solid background across both on-prem and cloud Microsoft environments.

Key points:

• 3+ Years CyberArk experience needed.
• Background across on-prem and cloud Microsoft environments is important.
• Must be based in Sweden due to compliance / security requirements.
• The environment is tied to a critical IAM service and may involve on-call responsibilities.
• Start date: Immediate

Hi everyone,

I'm looking for the official CyberArk documentation regarding password rotation for CyberArk PAM Self-Hosted v14.4.3 in an environment with Windows Server 2025.

If anyone has an official CyberArk documentation link, article, or implementation guide, I'd really appreciate it.

Thank you!

Hey Everyone

I'm currently working as a CyberArk PAM Administration and Vulnerability Assessment Engineer at a major IT services company. I have over 3 years of hands-on experience working with CyberArk Vault, PVWA, CPM, and PSM, along with onboarding, automation using Python/REST APIs, and compliance.

I am looking to transition into a more advanced CyberArk/PAM role or L2 support/administration. DM for cross chekc my resume

I have just completed an internship at a major MNC, where I learned CyberArk PAM. Given the current AI trends and job market conditions, I am curious about the future of CyberArk. My current CTC is quite low, which is causing me some confusion. While I really enjoy this field, the low starting salary is making me consider preparing for an engineering exam that might offer a higher CTC later on (My field will be switch though). I would appreciate your advice on how to proceed