To configure the Cloud Agent for Database Authentication, your system must meet the following requirements:
1. Cloud Agent Version: Windows Cloud Agent version 5.6.0 or above must be installed.
2. Subscriptions: You must have a subscription to the Policy Compliance application and Middleware Assessment.
3. Database Server: Microsoft SQL Server 2014, 2016, 2019, or 2022 must be installed.
4. CyberArk: CyberArk Application Access Manager (AAM) must be installed. If AAM is installed in a non-default directory, ensure the following environment variables are set in the system variables:
Variable Name: PAM_SDK
Variable Value: CUSTOMPATH\CyberArk\ApplicationPasswordSdk
5. CyberArk Vault: An application ID with the name QualysAgent must be created in the CyberArk Vault.
6. SQL Server authentication credentials must be stored in the CyberArk Vault, with required access permissions assigned.
7. Store the username for a Windows domain user account in the CyberArk Vault using the User Principal Name (UPN) format, which includes the domain username and DNS domain name e.g., UserName@DNSDomainName.
8. Certificate Installation: Install the C:\Program Files\CyberArk\ApplicationPasswordSdk\CPasswordSDK64.dll certificate in the Trusted Root Certification Authorities to enable DLL signature verification by the Qualys Cloud Agent.
Note: If the optional username input value provided in the new assessment does not match the username stored in the vault, the database assessment is skipped.
Qualys currently supports the following combination for database authentication using CyberArk.
| Windows Platform | Vault (On-Prem) | PVWA | SDK/CyberArk AAM | Credential Provider |
| All Windows platforms with SQL Support | 13.2.4 | 9.10 | 13.0.0.6 | 13.0.2 |