Configure CyberArk integration with RPA

You can use CyberArk as a custom source to retrieve credentials from. The default source to keep credentials is Secrets Vault.

Configure CyberArk

To add credentials to CyberArk, set the Account name in the following format: rpa.<host>.rdp.<master|unit1|unit2|...|unitN>.credentials.

To import certificates, see Integrate with CyberArk products | Enable certificate-based authentication with shared user (mTLS).

For credentials retrieval to work correctly, update the following parameters in the {RPA_INSTALL_DIR}/scripts/cyberark.ps1 file:

• baseURL: CyberArk server address where the password is stored.
• appId: ID of the Application under which a Safe is created in CyberArk.
• safe: Safe under which the account is added. Safes enable you to store and organize authorized user accounts according to your organization's requirements.
• certificateThumbprint: unique thumbprint of a certicate. To install a certificate on a local machine, double-click it. To update the $cert variable, add the thumbprint in the script.

Enable CyberArk

To enable credentials retrieval from CyberArk, perform the following steps:

1. Connect to the RPA server and open Windows CMD as Administrator.

2. Stop the WFSvc service.

   net stop WFSvc

3. Update the custom.secure.storage.script.path property with the CyberArk script file path in the following file:

   • C:/RPA/bot-agent/conf/bot-agent-master.yml in case of the server installation
   • C:/RPA/bot-agent/conf/bot-agent-nordp.yml in case of the VDI installation

4. Save the file.

5. Start the WFSvc service.

   net start WFSvc

Disable CyberArk

To disable CyberArk and retrieve credentials from Secrets Vault, do as follows:

1. Set the custom.secure.storage.script.path property to empty.
2. To apply the changes, restart the WFSvc service.