Skip to content

Latest commit

 

History

History
38 lines (27 loc) · 1.03 KB

pki-service-implementation.md

File metadata and controls

38 lines (27 loc) · 1.03 KB
Raw

Conjur PKI Service Implementation Guide

Last Updated: 2020-07-27

Pre-Requisite

  • PKI service is up and running

Configuration

We will have to create a pki-admin host. This host will have the ability to execute all Conjur PKI Service endpoints. This host is highly sensitive. Make sure to manage this host within CyberArk PAS or delete this user after initial configuration.

Load the following policy to generate a pki-admin host and give this host admin privileges on the pki service:

- !host pki-admin
- !grant
  role: !group pki/admin
  member: !host pki-admin

Load the above policy on the root policy branch.

You should receive a response similar to:

{
  "created_roles": {
    "cyberarkdemo:host:pki-admin": {
      "id": "cyberarkdemo:host:pki-admin",
      "api_key": "1bzwdwq2mpjpct3qtth2n2wjkh4q28qrx411rcjx9cakp5h16966jw"
    }
  },
  "version": 3
}

An api_key will be returned. You can onboard this host and api_key into Cyberark PAS for secure storage and management.