BeyondTrust Privileged Identity External Credential Storage for Discovery Integration - working?

[Kelly Logan]

Anyone currently using the BeyondTrust Privileged Identity External Credential Storage for Discovery Integration?

We have a Quebec instance with the latest MID server and up to date java and we ran into two issues:

1. The javaw command to open the GUI and create the Resolver file would not run. BeyondTrust Support noted this was a known issue and had the developer send us a fix, so now it is running. Except,
2. Now we can't get a successful connection test, but no logs, no error, no indication of why. We have another ticket with BeyondTrust but are still waiting on a response.

So, I'm just wondering if anyone else has this running currently and if you had to tweak any settings to do so.

Failing that, my next thoughts will be to get in touch with admins on the boxes to see if there are any system logs on the MID server, app logs on the Priviledged Identity server and/or network logs (or sniff some more attempts) to see if the connection request packets are making it through.

Open for other ideas/advice, thanks!

[Erick18]

We are using this integration on Quebec and since the upgrade we have not been able to use the GUI test button however the integration still works when testing the credential in ServiceNow. We actually just upgraded to Rome and the integration is still working however there is a new field called "Credential Vault" that defaults to Cyberark. I had to change this value to be none for the integration to work again. 

Thanks, 

Erick

[Ken77]

Hi Erick,

We're on Quebec and trying to get this to work. The GUI Launcher runs for us, but always says, "Test Failed" even using a PI admin account for the connection.

Just a few questions since your connection is working:

1) For PI Web Services URL: are you just using the base PI URL? (as opposed to something like https://piserver.com/erpmwebservice/authservice.svc/rest)

2) Did you need to do any additional setup/config in ServiceNow other than install the Plugin?

3) In PI did you have to do any special setup/config?

Thanks,

Ken

[Erick18]

For the PI Web Services URL I am using https://erpmwebsite.com/erpmwebservice/authservice.svc

The only additional config that had to be done was that we had to import certificates in the GUI Launcher because we are using self signed certificates. 

Lastly, ever since quebec I have not been able to get the test button to succeed in the GUI however the plugin still works when I try to test the credential from within the ServiceNow platform. 

Thanks,

Erick