CyberArk_Test_Procedure_Attachment_J-5._doc.pdf

CyberArk Test Procedure -092515 Attachment J-5

1. Ensure card reader and PIV card are in place

• Place the card reader in a USB port and insert PIV card.

• PIV card picture should be facing up with the gold certificate sliding into the reader

• You should see card reader activity

• If the you are using a VM, The card reader should be connected to the VM

2. Establish VPN to VDC (You must login to Netscaler)

• You will need your AIMS userid/password and two factor token.

3. Pre-check certificates

• Please bring up Internet Explorer

• Select the windows gear in the top right

• Pick Internet Options

• Pick Content Tab

• Select certificates

With the PIV card reader in place and your PIV card inserted, ensure that your certificate shows under the personal tab. (Note the example Robert Wehrle)

• The following two items are very critical

1. Ensure that you see a certification path that is similar to the above. If you do not see a path you will need to import the intermediate certificates that have been attached. See Appendix A and B.

2. Ensure that your Name is at the bottom certificate and that the word (affiliate) is appended. If this is not the case please alert Don Lindsey or Chris Safsten as soon as possible.

4. Access CyberArk link

• Please ensure you use Internet Explorer for this test.

• Close all Internet Explorer instances by selecting the browser exit at the yop right

• Open a IE Browser and point the browser at https://fsaptcpark006/PasswordVault/

Also please use the attached host file entry for fsaptcpark006 if it doesn’t resolve https://fsaptcpark006/PasswordVault/

And you will see

5. Select Certificate

Select the User Certificate Button. It will display a number of certificates found on your PIV card.

Please select the one that has your name on it and then select ok. When the system queries for the associated PIN, please input the correct PIN.

6. Successful Authentication

7. Logout

Appendix A – Viewing Intermediate Certificates

If there is a problem with the certificate chain as shown on Page 3 or you are receiving an http error code 403, permission denied, and then you may be missing intermediate certificates. You can check the intermediate certificates by opening a IE browser.

• Open IE and select the wheel gear in the right corner

• Select Internet Options

• Select content tab and select the button “certificates”

• Select “Intermediate Certification Authority” tab Please locate the following certificates

• VeriSign SSP Intermediate CA - G3

• U.S. Department of Education Agency CA - G3

Note the picture below shows the certificates sorted by issued to The certificates that might need to be imported are highlighted in the picture

Appendix B Importing Certificates (If necessary)

• If the certificate is zipped please unzip the certificate and place in a directory that you can locate

• Open IE and select the wheel gear in the right corner

• Select Internet Options

• Select content tab and select the button “certificates”

• Select “Intermediate Certification Authority” tab

• Select Button Import

• Next ->

• Select browse and point to the certificate that you had unzipped.

• Next->

• Next->

• Finish->

Please return to statement 3 and recheck the certificate path