CyberArk Clucter Vault install 12.2

CyberArk Cluster 12.2 Vault Installation: Step-by-Step Guide for Beginners
In this comprehensive video tutorial, we'll walk you through the complete installation process of a CyberArk Cluster 12.2 Vault. Whether you're a seasoned cybersecurity professional or just starting out, this guide will equip you with the knowledge and skills to set up a secure and resilient vault environment for managing privileged access. CyberArk Disaster Recovery Vault will also be installed. Data will be repicated from the Prod Vault Cluster to the DR Vault Cluster.
What You'll Learn:
Pre-Installation Requirements: Ensuring your environment is ready for a seamless installation. Install Visual C++ and .net 4.8. Ensure that Windows is fully updated.
Vault Server Setup: Install and configuring the primary vault and the DR vault.The Vaults are installed the same way.
Cluster Configuration: Setting up additional vault servers for high availability and disaster recovery.
Vault Replication: Establishing replication between vault servers for data redundancy and protection.
Post-Installation Verification: Validating the successful installation and functionality of the cluster.
Why This Video is Essential:
Clear Instructions: Easy-to-follow steps with detailed explanations for each stage of the installation.
Visual Demonstrations: On-screen visuals to guide you through the configuration process.
Expert Insights: Tips and tricks from experienced CyberArk professionals to ensure a successful setup.
Whether you're looking to enhance your organization's security posture or expand your knowledge of CyberArk, this video will provide you with a solid foundation for installing and managing a CyberArk Cluster 12.2 Vault.
Subscribe to our channel and hit the notification bell to stay updated on the latest cybersecurity tutorials and tips!
Note: The sound is an issue and the recoding was done over two days.

[@dru0pa]

I will be taking this Cluster Vault from 12.2 and 14.2 this was the prep work

[@dudejazz]

can we have the capacity planning and sizing discussed in the upcoming videos

[@The-Hidden-Face]

Is there a way to do share storage thing using SAN in this workstation lab, instead of windows scsi target

[@dru0pa]

If you can find an open scores project that will give you that option it is possible. I have just found it easy to use SCSI Target. Proable to get better perfomance using a Linux Box with a SCSI Target.

[@birds_eye3364]

What Storage are you using?

[@dru0pa]

iscsi storage presented from a windows server, it dose slow every thing down so slpit the cluster servers and the storage from the rest.

[@birds_eye3364]

@@dru0pa Thanks. Your videos are really good.

[@birds_eye3364]

I have couple of questions: 1. I see your Ethernet1 IP address is 192.168.20.4 (at 3:35 mins), so ideally this should be your LocalNodePrivateIP, however you put LocalNodePrivateIP as your LocalNodePublicIP ie. 192.168.10 (at 8:16 mins). Why? 2. Why do you copy PADR.ini, user.ini and Vault.ini(at 20:44 min), from S:\PrivateArk\PADR, to C:\Program Files (x86)\PrivateArk\PADR\conf?

[@dru0pa]

The 192.168.20.4 is the IP address Ethernet1 needed to talk to the ISCSI storage (192.168.20.1). Note in the dbparm.ini the storage needed to be allowed with the firewall rule. You cannot run the LocalNodePrivateIP on the Ethernet1 as this talks to the storage only. The 192.168.10.15 is the IP Address of the Ethernet0. This is the IP address needed to DRP to the Vault. The IP Address 192.168.10.16 is needed to talk to Vault (Port 1858). This interface is able to talk to any device on 192.168.10. subnet. It is possible to add a sub interface on this ethernet adapter for the LocalNodePrivateIP(192.168.50.15) to talk to the other servers LocalNodePrivateIP(192.168.50.17). You are able to use a third IP address (PeerNodePrivatelP) for the heartbeat between the two clustered Vault services (Vault-01-C2 to Vault-02-C2 only). It is possible to reuse the IP address (PeerNodePublicI) that you have assigned to the Vault (RDP) for the heartbeat. Heartbeat is the check for if the server is up and running and to ensure that only one server is Cluster is up. I copy the PADR.ini, user.ini and Vault.ini from the S drive to the C drive so do not have to recreate them again. (fewer steps to do and to prevent misconfiguration as these are known working details from the first vault)

[@birds_eye3364]

@@dru0pa damn that's exactly the explanation I needed, thanks again. I still have questions on the file copy of the PADR.ini user.ini and Vault.ini. Technically if we follow the documentation, we need to bring the storage up on the Vault-02-C2 before PADR installation. And if we do that then the file will catch up with the PADR installation on Vault-02-C2. My question specifically is around the copying, does it have any significance around the workability of PADR or its just for back up and copy purpose?