DeepSurface supports CyberArk as a method of privileged access management that can be used when DeepSurface performs Authenticated Scanning of your Windows and Mac hosts.
If your organization has enabled CyberArk as the method for managing local Administrator account passwords, you can configure a Scan Credential in DeepSurface to use CyberArk for accessing the local Administrator passwords for the associated hosts. To use this feature, a configured CyberArk credential should be added to the desired Scan Group(s) prior to running an Authenticated Scan.
Make sure your SSH key is stored in CyberArk.
ssh-keygen -p
command to strip a password from an existing SSH key.Set the Credential Type/Protocol field to SSH Private Key.
Fill in the remaining fields. An example is provided below.