CyberArk Conjur Configuration

Open DCM by going to File - Manage Connections.

Select External Vaults.

Select the + New button to add a new Vault to DCM.

Choose the CyberArk Conjur technology.

Enter a custom name for this Vault connection.

Enter the URL where your CyberArk Conjur is located.

Both HTTP and HTTPS are supported, although with HTTPS, make sure you have a valid certificate configured on your machine in the Windows certificate store is used, or all instances are trusted. installed locally on each machine connecting to Conjur. No need to manually import/enter the certificate into DCM directly. More on Conjur certificates here.

For examplehttps://127.0.0.1:3000

Next, enter the Account name and select Save.

Select + Connect Credential and choose Create New Credential in the Credential dropdown.

Fill in the fields (the username and password you use to access CyberArk Conjur).

Select Create and Link.

From now on, you will be able to select this newly created Vault when you create new Credentials.

Open DCM by going to File - Manage Connections.

Select Credentials in the top-left corner.

Select the + Add Credential button to add a new Credential.

Enter a name for your new Credential.

In the Vault dropdown, choose the Conjur instance you created in the previous chapter.

Fill in the Vault Path field with the path to the authentication data in your CyberArk Conjur. The path should always be prefixed by the text “variable”, followed by the actual path under that account, in order to reach the right Conjur secret.

For example, if I have a username and password for my Microsoft SQL database saved in Conjur, the path could be this: "variable/sql/userpass".

Next, choose your preferred Method of authentication. This method should match the authentication data you want to fetch from Conjur.

For example, if I want to get the Username and Password from Conjur, I will select the "Username and password" option.

Make sure the Use Values from Vault checkbox is enabled, if you want the authentication data to be fetched from Conjur. Then, each corresponding field should contain the key, under which is the value saved in your Conjur.

For example, if my Username is saved in Conjur under a key named "SQLUsername1", then I will check "Use Values from Vault" and enter "SQLUsername1" in the Username field.

Select Save.

From now on, you will be able to use this newly created Credential for a corresponding Data Source when you configure a workflow tool.

Start by creating a new Workflow, and adding some input or output data tools.

For example, I can add an Input Data tool

Make sure the tool is configured to use DCM (enable the Use Data Connection Manager (DCM) checkbox in my Input Data tool).

Setting up your connection, choose your desired technology.

For example, I will select "MSSQL Server Quick Connect" in my Input Data tool

Once the Connection Manager window opens, choose an existing Data Source or create a new one.

Select + Connect Credential and choose the credential created in the previous chapter (the one that gets authentication data from Conjur).

For example, I will select the Credential that I named "John's MSSQL creds".

Select Create and Link.

Selet Connect.

Now, the connection is set up. You can proceed to configure any specific details related to your data source technology (e.g. select database table, record limit, etc.).

Once your workflow is ready, run it to see if you correctly authenticate to your Data Source using Credentials obtained from your CyberArk Conjur.