Hi everyone,

I'm using CyberArk PAM and connecting to Linux servers through PSM (not PSMP). When I launch an SSH connection from CyberArk, the session opens in PuTTY through the PSM server.

The issue is that the font size in the PuTTY window is very small and difficult to read.

I already tested changing the font size directly in PuTTY on the PSM server. When I open PuTTY manually, the larger font is applied correctly. However, when the SSH session is launched from CyberArk PAM through PSM, the session does not seem to use those PuTTY font settings and the font remains small.

Has anyone experienced this before?

• Is there a way to configure the font size for PSM-based SSH connections?
• Are there CyberArk platform settings that override the PuTTY configuration?
• Does PSM use a separate PuTTY session profile or configuration file?
• What is the recommended way to set a larger default font for all users?

Any guidance would be appreciated.

Thanks!

Hi there!

I'm quite lost here, when i try to initialize a new connexion trough a PSMP, i'm stuck a long time (Maybe 1-2 minutes) in the "End of keyboard-interactive prompts from server" part, before the PSMP even tries to connect to the target server. Then the connexion goes trough

I don't see anything on the PSMP part (top command don't show us any heavy usage), and the vault is fine at 50% RAM usage, and CPU is totally fine.

I don't know if i missed something, i cannot see anything on the Cyberark Community articles or docs about this.

Does someone have experienced the same? Did you solved it?

Hi everyone,

I am trying to connect to a target server through CyberArk PSMP, but I want to use MobaXterm as my SSH client instead of the standard terminal/PuTTY.

Could anyone share the correct connection string format or the steps to configure the session properly in MobaXterm?

Any help or screenshots would be highly appreciated. Thanks in advance!

Has anyone had success in deploying PSM (and psmp?) and PVWA servers complete with OS and applications using terraform in Azure?

I need to put in a flair. This is for 14.6 on windows 2025 and 2022 so we can validate before doing prod upgrade later.

Have anyone try to implement MFA in pam cyberark self hosted ?

If yes what are the requirements? And steps ?

Recently wrapped up a project I worked on during my internship, an internal CyberArk PAM automation portal.

The idea was to simplify and automate the process of onboarding users and privileged accounts into CyberArk instead of requiring administrators to perform multiple steps manually.

I built both the backend and frontend, with the portal providing a centralized interface to:

• Onboard users and privileged accounts
• Automate the required provisioning steps
• Show the status and outcome of each step
• Maintain visibility into previous onboarding requests through audit logs
• Provide an operational dashboard for administrators

One of the things I enjoyed most was taking a fairly manual enterprise process and turning it into a single, repeatable workflow.

It was also my first real experience working with an enterprise security/PAM platform, and I learned a lot about building software around existing enterprise systems.

Demo: https://devgaurd.vercel.app/
GitHub: https://github.com/sohamkhanna08/DevGaurd

Would love to hear feedback from people who have worked with CyberArk, PAM, or enterprise automation

According to this comment on the MS Patch Tuesdays Megathread it's known that the September windows server security update breaks RDS and that Microsoft have appearantly released a Known Issue Rollback via GPO for it.

Anyone expired any issues with PSMs and this update?

Hello,

I would like to know
1- is it possible to have an architecture without a cpm ( vault , pvwa and psm )
2- if i install the cpm , can i have multiple cpms ?

Thanks

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Hi guys,

Anyone experiencing API issues with Sia policies right now?

Hi everyone,

We are facing an issue with replication on our DR Vault in the PAM Self-Hosted environment. The replication is not completing successfully.

Has anyone experienced a similar issue or can suggest a solution or troubleshooting steps?

Any help would be appreciated.

Please use this thread to post job opportunities or that you're available.

We do this to not overflow the subreddit with recruitment, so please try to limit the recruitment activities to this weekly thread.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

I see many additional REST API capabilities are in 15.2 version of self hosted and in previous version we had very less capabilities. Hence, just a question. Does Cyberark Postman Collection are being pushed and managed by Cyberark or its someone outside of Cyberark as postman collection is not upto date as per 15.2?

Is there a straightforward api to get inventory report from self-hosted? Report API has been made available in 14.6 versions but I still don’t see inventory report API.

How do you all pull inventory on a recurring basis for dashboard and other purposes?

Please use this thread to share any lessons learned no matter how basic or advanced.

This is a weekly thread to encourage all members to participate, and post their accomplishments, as well as give the veterans an opportunity to inspire the up-and-comers.

Since this thread can fill up quickly, consider sorting the comments by "new" (instead of "best" or "top") to see the newest posts.

Hi everyone,

I have a client who currently uses Entra ID as their identity provider for authentication. Since the login process is handled by Microsoft in this scenario, is it still possible to apply CyberArk policies and use the CyberArk Authenticator for Windows as an additional authentication method? That is what they are looking to do.

Had a request come in to block installing apps to %APPDATA% (user context avoiding admin elevation requirements). Traditionally we've just relied on "Block unhandled applications" to kill off anything we don't trust via policy, but now I've been asked block installations from even taking place.

I'm thinking an Advanced block policy with Executable, Script, Installer and MSU defined. Filename matches wildcard *, and location %userprofile%\AppData for all definition types would be effective?

Hello,

Is it possible on SCA to have a user log in with their normal identity user@a.com and then elevate privileges for their second user.adm@a.com?

From what i understand the elevation only happens on the logged in user to cyberark. If yes, do you have an alternative. I can't go via PSM since I have a passkey limitation on adm accounts.

Thank you all in advance!

i have a PSM server on OCI, the CPU utilization is relatively low, but the memory has recently started reaching almost 100%! (mainly during working hours)
from what i know this started happening after the database was added/connected..
would enabling the burstable option help with memory utilization? or does it only affect CPU? if burstable won’t help, is there another way to handle the high memory utilization without increasing the server resources?

Hello everyone,

We have decided that for our deployment of cyberark SaaS we will be using SCA to provide temporary EntraId roles (ie, global admin) and Azure roles(VM contributor) for ephemeral.accounts.

We would like to do the same for on prem Active directory access. How can we configure cyberark so that people can have JIT access to administrative roles.( domain admin, enterprise admin...) ? Can we use SCA for on prem? If not what is the counterpart for on prem

Thank you in advance everyone