CyberArk Connection - User Interface Components

1.0 Introduction

This article describes the user interface (UI) features of the CyberArk (SaaS and On-premises) connection in Fortanix Key Insight.

2.0 Terminology References

For CyberArk connection concepts and supported features, refer to CyberArk Connection Concepts.

3.0 Overview

The CyberArk connection Overview page appears after adding a CyberArk SaaS or On-premises connection.

The Overview page displays the certificates discovered within the CyberArk environment based on the applied Fortanix Key Insight policy.

For more information on the Fortanix Key Insight policy, refer to Cryptographic Policy Management.

NOTE

• If your Fortanix Armor account is deactivated and you are accessing the Fortanix Key Insight CyberArk connection, you will not be able to view data on the Overview, Assessments, or Certificates pages. You will only have access to view and delete items under Configuration, including Connections, Policy Center, and Authentication pages.

• If the count of the certificates before the scan does not match the count of the CyberArk certificates after the scan:

  • Verify that the CyberArk platform is properly configured before running the scan.

  • After verification, initiate a re-scan using the RESCAN option. For more information, refer to Section 5.0: Rescan a CyberArk Connection.

• Click ASSESSMENT REPORT to navigate to the Assessment page and view the assessment report. For more information, refer to Section 4.0: Assessments.

The Overview page helps users get a summary of the scanned certificates described in the following sections:

3.1 Discovered Assets

This section summarizes the number of assets discovered for a CyberArk connection.

It displays the count of the scanned certificates.

Click Certificates to view the certificate list.

3.2 Cryptography Bill of Materials (CBOM)

This section describes how to export cryptographic asset metadata from a CyberArk connection into a standardized CBOM JSON file. The exported CBOM file helps you to maintain a cryptographic inventory, demonstrate regulatory compliance, and evaluate post-quantum cryptography (PQC) readiness.

To export the CBOM data, click EXPORT.

A file named bom_report_<CyberArk_scan_id>.json is downloaded to your local system, where CyberArk_scan_id is the unique identifier generated for each scan.

For example,

The exported file adheres to the CycloneDX specification and includes the following components:

• bomFormat: Specifies the format of the bill of materials. For CBOM, this value is set to CycloneDX.

• specVersion: Indicates the version of the CycloneDX specification used.

• version: The version of the generated CBOM file.

• components: Lists cryptographic components such as certificates. Each entry includes details such as type, name, algorithm, associated services, and so on.

• services: Describes the CyberArk resources that interact with the listed cryptographic components. Each service includes details such as its name and Universally Unique Identifier (UUID).

• dependencies: Defines relationships between certificates and resources, representing how cryptographic elements are interconnected or used together.

NOTE

If your CyberArk connection was last scanned before the Fortanix Key Insight 26.01 release and has not been rescanned, you must perform a Rescan to ensure the correct CBOM.

For more information on how to perform a rescan, refer to Section 5.0: Rescan a CyberArk Connection.

3.3 Certificates by Status

This section summarizes the status of scanned CyberArk certificates, displaying the count of the following:

• Issued certificates

• Certificates in error

• Revoked certificates

• Unknown certificates

• Expired certificates

Click any status label or count to navigate to a filtered list view of the corresponding certificates.

3.4 Certificates by Algorithm Type

This section summarizes the distribution of certificates by key algorithm type (for example, RSA 2048).

Click any key algorithm type to view a filtered list of certificates using that algorithm.

4.0 Assessments

After adding a CyberArk connection, you can access the Fortanix Key Insight Assessment page from the left navigation panel.

The Assessment page displays:

• Key security posture details for the connection.

• Violations that require remediation to improve the security status.

• Remediation guidance to strengthen the overall security posture.

4.1 Risk Score

This section provides the overall risk score of the scanned certificates.

The following is the risk score category and its associated risks:

• Critical – A critical risk score indicates the total number non-compliant certificates (key algorithm) in use.

• High – A high score signifies the total number of non-compliant certificates by signature that need attention.

The overall risk score is prioritized based on the number of risks, in order of severity from highest to lowest:

• Critical

• High

• Medium

• Good

Click each risk label or count to access its corresponding list view.

4.2 Top Security Issues

This section provides the following information about the certificates:

• PQC readiness: Displays the percentage of CyberArk certificates that are currently quantum-safe. This percentage represents the proportion of assets that use PQC-compliant algorithms or configurations. Click the percentage value to navigate to the PQC Central page, where you can review detailed information for the selected CyberArk connection and assess the readiness of individual certificates.

4.3 Certificate by Violation Type

This section displays the total number of non-compliant certificates categorized by specific violation types (For example, shared certificates), helping you take targeted action to address security or policy gaps.

• Click the count for a specific violation type to view a filtered list of certificates affected by that violation.

• Click the overall certificate count to view a filtered list of all affected certificates.

4.4 Certificate Expiry Status

This section provides insights into certificate expiration across CyberArk environments. It organizes certificates by issuer (if available) to help you monitor and manage lifecycle risks.

Use this section to:

• Identify certificates nearing expiration

• Reduce operational and security risks

• Maintain compliance and service availability

This section contains two sub-sections:

4.4.1 About to Expire in 30 Days

This section displays the top 10 certificates that are scheduled to expire within the next 30 days, grouped by certificate issuer, if any. Each issuer is represented using a distinct color for easy identification.

• Click the count associated with a specific issuer or the overall total to navigate to a filtered list view displaying the corresponding certificates.

• Click VIEW ALL to view the list of all certificates in the category.

4.4.2 Expired Certificates

This section displays the top 10 certificates that have already expired, grouped by certificate issuer, if any. Each issuer is represented using a distinct color for easy identification.

• This data helps to identify misconfigurations, overlooked assets, or potential security risks from expired certificates.

• Click the count associated with a specific issuer or the overall total to navigate to a filtered list view displaying the corresponding certificates.

• Click VIEW ALL to view the list of all certificates in the category.

4.5 Download Assessment Report

Click DOWNLOAD REPORT on the top-right corner of the Assessment page to view the Data Security Assessment Report for the CyberArk connection in PDF format.

The report will open in the Print dialog box, where you can select to print it or save it locally to your machine as needed.

5.0 Rescan a CyberArk Connection

Click RESCAN on the top right corner of the Overview or Assessment page to perform a rescan and verify if any certificates have been added, deleted, or updated in your CyberArk environment.

If you click RESCAN to start the scan, you can monitor the progress bar as it runs. After the scan completes successfully:

• The Last scanned label will update with the completion date and time.

• The Overview page will reflect the updated status of the CyberArk certificates.

NOTE

The RESCAN option is accessible only to users with the Account Administrator and Group Administrator roles.

6.0 Certificates

After onboarding the CyberArk (SaaS or On-premises) connection, click Certificates in the Fortanix Key Insight left navigation panel to view the scanned certificate details. The Certificates page displays information for all certificates discovered within the CyberArk environment.

6.1 List View

The certificates list view displays all certificates in a table, along with their details.

• Enter a value in the Search field to filter certificates based on the available criteria and supported values.

  For example:

  • Certificate Name

  • Issuer

• Click in the top-right corner of the table to customize which columns are displayed, beyond the default six.

• Click EXPORT to export the scanned certificates data. For more information, refer to Section 7.0: Export Scanned Data.

• Click in the VIOLATIONS column to view detailed information about the associated vulnerabilities.

6.1.1 Add Certificate Details

You can assign owners to the scanned certificates to enhance certificate management, simplify tracking, and improve remediation workflows.

Perform the following steps to add the certificate(s) details:

1. Select the check box next to the required certificate(s) in the list.

2. Click ADD DETAILS in the top right corner of the table.

3. In the Add Details dialog box:

   • Primary owner: Enter the primary owner’s name or employee ID.

   • Email ID: Enter the primary owner’s valid email ID.

   • Click ADD SECONDARY OWNER to add the secondary owner’s details, if required.

   • Description (Optional): Enter a description.

   • Click ADD to add the ownership details to the selected certificate(s).

NOTE

You must specify a primary owner before adding a secondary owner.

After you add the details, the OWNERS column on the Certificates page displays the primary and secondary owners’ names or employee IDs and email addresses. The USAGE DESCRIPTION column displays the description provided for the certificate.

NOTE

Only users with Account Administrator permissions can add or edit certificate details.

6.1.2 Edit Certificate Details

You can modify the details of the selected certificate(s).

Perform the following steps to edit the certificate(s) details:

1. Select the check box next to the required certificate(s) in the list.

2. Click EDIT DETAILS in the top right corner.

3. In the Edit Details dialog box, update the required values and click UPDATE to apply the changes.

6.1.3 View Certificate Details

Click any Certificate Name in the list to view its properties and violations.

• The CERTIFICATE DETAILS tab displays the certificate’s properties, ownership information (if provided), and domain name and Subject Alternative Name (SAN) details.

  If required, click EDIT DETAILS on the Ownership section to update the ownership details for the selected certificate.

  

• The VIOLATIONS tab displays violation details associated with the certificates.

  

7.0 Export Scanned Data

The EXPORT feature allows you to export the CyberArk scanned certificates data from Fortanix Key Insight in Comma-Separated Values (CSV) format. Also, it provides flexibility, enabling you to download data for detailed analysis, audits, or reporting, and to access real-time status.

In the CyberArk Certificates list view, click EXPORT to export the scanned data using any of the following options:

• Export current page: Exports all column data displayed on the current page in CSV format.

  NOTE

  You can export a maximum of 100 items at a time, based on the number of items specified in the Items per page drop down.

• Export all raw data: Export all available data shown in the certificate tables in CSV format. When you select this option, the Export All Raw Data dialog box opens. Review the information and click PROCEED to export all the data.

  NOTE

  After you start an export, you can track its progress in the Activities tab. The export status is recorded as an activity in Fortanix Key Insight. For more information, refer to Section 7.1: View Export Activities.

• Export selected rows: Exports the selected rows on the current page in CSV format. This option is disabled until you select one or more rows using the check box next to each row.

NOTE

• Only users with the Account Administrator and Group Administrator roles can perform the scanned data export.

• Multiple exports can run concurrently within the same account across different connections (manual import, cloud, on-premises, external key sources, and vendor applications).

7.1 View Export Activities

After you initiate the export process using Export All Raw Data, you can track the export status in the Activities menu located on the Fortanix Key Insight left navigation panel.

The Activities page displays the following details are available for each export activity:

• ACTIVITY NAME: Displays the name of the export activity. For example, Export_all_cyberark-certificates.

• FILE NAME: Displays the name of the exported CSV file.

• STATUS: Indicates the current state of the export.

  The status can be one of the following:

  • Completed: The export completed successfully, and the CSV file will automatically download to the location specified on your local machine.

  • In Progress: The export is in progress, and you can cancel it using if required.

  • Cancelled: The export was cancelled, either because you switched accounts or cancelled the export while it was in progress.

  • Failed: The export could not be completed because of an error.

• CONNECTION: Displays the name of the connection associated with the export.

• CREATED AT: Displays the date and time when the export activity was created.

NOTE

• If you switch to a different account during export, the export is cancelled, and the cancellation is recorded in the Activities tab.

• If you navigate to a different solution (for example, Identity and Access Management), while the export is in progress, the export continues. However, the export activity is not displayed in the Activities tab. The export status is provided through a confirmation message.

• Avoid refreshing the web page while an export is in progress. If you refresh the page, a confirmation dialog box is displayed. If you confirm the refresh, the export is cancelled, and all related entries are removed from the Activities.