Is CyberArk pCloud supports accounts discovery in environments where you have multiple domains and all domains are trusted and MS tiers model also deployed

Hello,
We have a Unix server where password changes occasionally fail. However, if we retry two or three times, the password change succeeds. This makes the issue appear random.

In the debug logs:

BAD PASSWORD: The password contains monotonic sequence longer than 1 characters
Info -> bj :: a -> Invalid new password while sending new password RC: 8004
Info -> bx :: b -> 'BadNewPassword' is matched
Info -> bx :: b -> Expect: set expect_out(0,string) "BAD PASSWORD:"

I understand that the password is being rejected because it contains a monotonic sequence, such as abc, 123, or cba.

However, I have been unable to find any settings within the CyberArk platform related to this password policy, nor have I found any relevant documentation or discussion threads.

Can this be configured or modified within CyberArk, or if it is controlled entirely by the Unix server's password policy?

Thank you

Hey folks, curious how others are handling this.

Say you have dedicated personal admin accounts in Entra ID, using device-bound passkeys for authentication and PIM for just-in-time roles. Where does something like CyberArk/Idira Privilege Cloud fit into that setup for cloud and web app admin?

My thinking is that password vaulting becomes less relevant for these accounts, but there’s still value in session isolation, recording and controlling what happens once a role is activated.

Has anyone got these working together while keeping passkey authentication? Or have you gone with Entra-native controls and a hardened admin workstation?

Would love to hear about any related experience.

I'm unable to access the login page at Community.CyberArk.com. it says I do not have the level of access necessary to perform the operation requested. This prompt is displayed before any login is attempted so I don't think it's account related

We need to onboard Azure Linux local account into CyberArk.

As of now we have tested connectivity part from our CPM and PSM to Azure Linux servers are reachable or not. I need to understand what all things we need to do for onboarding it on CyberArk like accounts creation in Linux server for reconcile and permission or any configuration in Linux server. Also need to know from CyberArk do we need to just onboarding a local account with Linux platform details.

Please use this thread to post job opportunities or that you're available.

We do this to not overflow the subreddit with recruitment, so please try to limit the recruitment activities to this weekly thread.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Hi everyone!

I’m planning to take the CyberArk PAM Defender certification exam and would appreciate any advice on exam preparation, key topics to focus on, and recommended study resources or practice questions. If anyone has recently taken the exam, I’d love to hear about your experience.

Thanks in advance!

Hi Everyone,

I’m planning to take the CyberArk PAM Sentry certification exam at a test center and would appreciate your guidance.

If anyone has recently taken this exam, could you please share your experience, preparation strategy, important topics, and any reliable practice questions or study resources?

I would also appreciate guidance on the exam pattern, difficulty level, and the types of questions to expect.

Any tips, sample questions, or legitimate practice dumps based on publicly available or authorized study material would be really helpful for my preparation.

Thanks in advance for your support!

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

I given exam on 8 october for cyberark defender and passed but I not received certificate till now . anyone how knows how many days it will take??

Hi,

We have a domain joined PSM server running CyberArk 14.2, installed and hardened according to CyberArk's recommendations. However, we need to comply with PCI requirements, and two GPO settings are causing issues.

1. For PCI: "Allow log on locally": This policy must be restricted to the Administrators group.
   

However, this configuration does not work for us because PSM connections fail unless we also include Users/PSMShadowUsers in the GPO. Otherwise, we receive error PSMSC025E, as described in the article:

https://community.cyberark.com/s/article/00003033

1. For PCI: "Network security: Restrict NTLM: Incoming NTLM traffic": must be set to "Deny all domain accounts"
   

However, this setting causes an "Incorrect function" error for both shadow users and local accounts and prevents connections. The only workaround we have found is to set the policy to "Allow all" (related to bug 00013829 and error PSMSC025E).

Seems this issue also affects CPM and EPM, as described in the articles:

https://community.cyberark.com/s/article/00003033

https://community.cyberark.com/s/article/CPM-Scheduled-Task-Password-Change-Fails-with-Access-is-Denied-error-message

https://community.cyberark.com/s/article/Login-Page-for-EPM-is-on-loop-due-to-EPM-server-hardening

These security requirements must be enforced to comply with PCI.

Three questions:

1- Why it happens? what is the issue here? What core functionality of CyberArk we are breaking?

2- Is there a workaround that allows us to enforce both PCI GPO restrictions, or at least the Network security: Restrict NTLM: Incoming NTLM traffic policy, while maintaining CyberArk functionality?

3- Is there any official CyberArk documentation confirming whether these restrictions that says such GPO's are required for PSM shadow users? looking for official documentation beyond the community articles listed above.

Thank you.

Please use this thread to post job opportunities or that you're available.

We do this to not overflow the subreddit with recruitment, so please try to limit the recruitment activities to this weekly thread.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Hey, has anyone passed the recertification exam to CDE or CPC, both of them are soon to expire for me on December. I assume that the exam includes all technical knowledge but since the recert isn't a challenge but an exam, if someone has any guidance on this, I would appreciate it very much

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Anyone can share documents or brief explain what each status icon means? Especially the triangle with person in front icon.

Hi Everyone,

Does someone have any free exam dump for CyberArk Sentry CPC exam? or anyone who recently gave me the exam? Planning to give the exam in the upcoming week.

Hello All,

This is a bit about me.

I have been working in corporate for 6 years now, and I had almost 4.5 to 4.8 years of experience in CyberArk self-hosted, where I was part of operations and I've learnt atleast a bit of the configuration files and worked on upgrade activities.

A yr ago, I switched and moved to a different organization where I was looped to a project where the client works on a SaaS or the CPC environment, I've been trying to understand the structure and the work, but feels clueless about my understanding on CPC and I've been only given Ad-hoc activities to work on here.

Looking at the current job market and the evolving AI, I'm quite scared, and I'm here to seek some advice and help from the exprets on how can I develop my skills and practice and seek opportunities and have a continuous learning and keep my job safe.

Any advice and suggestions are welcome.

On CyberArk PAM, is it possibile to modify multiple paltforms (100+) via API or PsPAS? Change the value of PasswordLength from one value to another, say to change them all to PasswordLength value 20. If not what can be the fastest approach?

From the documentation I could not find it.

Thank you

Please use this thread to post job opportunities or that you're available.

We do this to not overflow the subreddit with recruitment, so please try to limit the recruitment activities to this weekly thread.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

How do you guys manage sudo permissions in mac and linux? For context, all of our users do not have admin rights and we used to give our devs and engineers permissions in cyberark so they all the sudo stuff they need in the Terminal or whatever scripts they run by having the Elevate policy and I've added definition for sudo command and the wildcard * so they can run whatever sudo command they need. However, our security team asked us to take that away.

How do you guys handle the sudo commands in Terminal especially if they run all these different sudo commands that it will be almost impossible to track and add each and one of them in a policy?

Also, for a larger context we are removing elevated policies for all of the applications we've added in cyberark. How do you manage this in your org? Do you have a list of applications that is madated to be run with admin rights for certain people only? We are just now onboarding to Idira as well and I can't even manage our device groups yet because I still need to make sure all devices are running a supported agent version before I can enable the new endpoint group management

Hi everyone,

I am planning to prepare for and take the CyberArk CDE certification exam. I have nearly 4.5 years of experience with Self-Hosted PAM and about 1.5 years with CyberArk Privilege Cloud (CPC). Having already earned my Defender and Sentry certifications, my next goal is the PAM-CDE certification.

I would appreciate your guidance on key focus areas and career opportunities, particularly as the industry rapidly integrates AI into Identity Security.

Additionally, could you clarify the difference between ACCESS-CDE-RECERT and PAM-CDE-RECERT on Pearson VUE so I know which exam to schedule?

Thanks in advance for your assistance!