Skip to main content

CyberArk CCP Reference Guide

Configuring JDBC Token Vault credentials

If you are using a JDBC Token Vault with CyberArk, the platform mandates that all JDBC credentials are stored, managed and retrieved from CyberArk.

This means that instead of providing the URL, user and password as part of the token vault configuration during the setup of a platform Environment, you need to provide the relevant descriptor queries that can be used to retrieve the values from CyberArk CCP.

The Descriptor values required are:

  • URL Descriptor (CyberArk CCP)

  • User Descriptor (CyberArk CCP)

  • Password Descriptor (CyberArk CCP)

In the platform (using CyberArk CCP), these values are defined in the Token Vaults tab, when the Token Vault Type list box is set to JDBC:

jdbc-token-vault.png

For more information about the descriptor format that can be used to define these values, see CyberArk Descriptor Format.