Question
Centene
US
Last activity: 5 Mar 2021 1:15 EST
CyberArk Support in 8.4
As of PRPC 8.3, CyberArk is supported as the Enterprise Password Vault for your database in IBM WebSphere environments.
So any update in 8.4, was it supported in Tomcat ? Any additional support added in the latest versions?
Any roadmap that was defined for CyberArk integration?
Pegasystems Inc.
GB
Hi Rajani, No CyberArk is not supported in App servers other than WAS.
Cognizant
IN
Cyber Ark integration we can do on any run time container ; Please follow below instructions
1.Add below JVM argument (to fix the pega bug)
-Dcom.pega.prminiloader.avoiddbforgetresource=true
2. update your JDBC resources
<Resource name="jdbc/PegaRULES" auth="Container" type="javax.sql.DataSource" driverClassName="com.cyberark.aim.v550.tomcat.ASCPDriver" url="vendorDriver=oracle.jdbc.OracleDriver;jdbc:oracle:thin:@//host:port/SERVICENAME" userPropertyName="user" passwordPropertyName="password" maxTotal="100" maxIdle="30" maxWaitMillis="10000" validationQuery="SELECT 1 FROM DUAL" connectionProperties="check with your vault details"/>
3. Add Cyber Ark jdbc driver jar -CACredTCMapper550.jar and javapasswordsdk.jar (to fetch from vault )in JVM class path
Note#
Certain versions of the CyberArk 3rd party client JAR files have a Java code with hardcoded Apache DBCP connection factory.so to fix this bug we need to Customize the factory the implementation to switch to
org.apache.tomcat.jdbc.pool.DataSourceFactory.
Regards
Bhagath
Certified J2EE Architect / Pega CLSA
Cognizant
IN
Cyber Ark integration we can do on any run time container ; Please follow below instructions
1.Add below JVM argument (to fix the pega bug)
-Dcom.pega.prminiloader.avoiddbforgetresource=true
2. update your JDBC resources
<Resource name="jdbc/PegaRULES" auth="Container" type="javax.sql.DataSource" driverClassName="com.cyberark.aim.v550.tomcat.ASCPDriver" url="vendorDriver=oracle.jdbc.OracleDriver;jdbc:oracle:thin:@//host:port/SERVICENAME" userPropertyName="user" passwordPropertyName="password" maxTotal="100" maxIdle="30" maxWaitMillis="10000" validationQuery="SELECT 1 FROM DUAL" connectionProperties="check with your vault details"/>
3. Add Cyber Ark jdbc driver jar -CACredTCMapper550.jar and javapasswordsdk.jar (to fetch from vault )in JVM class path
Note#
Certain versions of the CyberArk 3rd party client JAR files have a Java code with hardcoded Apache DBCP connection factory.so to fix this bug we need to Customize the factory the implementation to switch to
org.apache.tomcat.jdbc.pool.DataSourceFactory.
Regards
Bhagath
Certified J2EE Architect / Pega CLSA
Morgan Stanley
IN
Hi @Bhagath,
I found your post useful, Could you please tell if this the above configuration work for Pega 8.4 on JBoss Redhat EAP 6.4 as well.
Regards,
Rakesh kumar