Enable Password Rotation for discovery schedule-Urgent!

MDAQUIBK
Tera Contributor

Hi All,

 

We have recently completed the integration of CyberArk with ServiceNow for discovery credentials. As of now, all Configuration Items (CIs) are being successfully discovered. However, we have not yet enabled password rotation for these accounts, as we are encountering some challenges related to the discovery schedules. Specifically, since the discovery schedules run daily and the completion time of each discovery cycle is not fixed, we are unable to accurately track the complete cycle and trigger password rotation at the right time.

 

Need help with the following:

1.Will triggering the password rotation in the middle of a running discovery schedule impact the discovery process? 2.What would be the best approach to enable password rotation in such a way that all discovery schedules are completed successfully without interruption?

 

Thanks

2 REPLIES 2

Shivalika
Mega Sage

Hello @MDAQUIBK 

 

1) Triggering password change in middle of discovery process is not recommended because it may cause credentials issue - usually we do credentials based discovery and there can be an error there. Credential less discovery takes time. 

 

Additionally there are probes that stops if the session times out and I am assuming changing the password will break the session in middle. So it's not recommended.  

 

2) You need to align with discovery schedule timings and do the password rotation. Dont do it once for all, do it based on timings, which schedule ends when you can then do it. 

 

Kindly mark my answer as helpful and accept solution if it helped you in anyway,

 

Regards,

Shivalika 

 

My LinkedIn - https://www.linkedin.com/in/shivalika-gupta-540346194

 

My youtube - https://youtube.com/playlist?list=PLsHuNzTdkE5Cn4PyS7HdV0Vg8JsfdgQlA&si=0WynLcOwNeEISQCY

 

Shivalika
Mega Sage

Hello @MDAQUIBK 

 

 

Please confirm if you checked my answer. Kindly mark my answer as helpful and accept solution if it helped you in anyway, so that it can move from unsolved bucket to solved bucket. 

 

Regards, 

Shivalika 

 

My LinkedIn - https://www.linkedin.com/in/shivalika-gupta-540346194

 

My youtube - https://youtube.com/playlist?list=PLsHuNzTdkE5Cn4PyS7HdV0Vg8JsfdgQlA&si=0WynLcOwNeE