This Ansible Role will deploy and install CyberArk Central Policy Manager including the pre-requisites, application, hardening and connect to an existing Vault environment.

• Windows 2016 installed on the remote host
• WinRM open on port 5986 (not 5985) on the remote host
• Pywinrm is installed on the workstation running the playbook
• The workstation running the playbook must have network connectivity to the remote host
• The remote host must have Network connectivity to the CyberArk vault and the repository server
  • 443 port outbound
  • 1858 port outbound
• Administrator access to the remote host
• CPM CD image

These are the variables used in this playbook:

None

The role consists of a number of different tasks which can be enabled or disabled for the particular run.

cpm_install

This task will deploy the CPM to required folder and validate successful deployment.

cpm_hardening

This task will run the CPM hardening process.

cpm_registration

This task will perform registration with active Vault.

cpm_validateparameters

This task will validate which CPM steps have already occurred on the server to prevent repetition.

cpm_clean

This task will clean the configuration (inf) files from the installation, delete the CPM installation logs from the Temp folder and delete the cred files.

Below is an example of how you can incorporate this role into an Ansible playbook to call the CPM role with several parameters:

---
- include_role:
    name: cpm
  vars:
    - cpm_prerequisites: true
    - cpm_install: true
    - cpm_hardening: true
    - cpm_registration: true

For an example of how to incorporate this role into a complete playbook, please see the pas-orchestrator example.

Apache License, Version 2.0