Which components can connect to a satellite Vault in a distributed Vault architecture?
Which components can connect to a satellite Vault in a distributed Vault architecture?
In a distributed Vault architecture, the components that can connect to a satellite Vault are PVWA (Privileged Vault Web Access) and PSM (Privileged Session Manager). This is because the satellite Vault is typically read-only and is utilized for access rather than for performing write operations such as password changes, which CPM (Central Policy Manager) would do. Therefore, CPM should only connect to the primary Vault to avoid consistency issues.
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.0/en/Content/PAS%20INST/Distributed-Vaults-Introduction.htm?tocpath=Installation%7CInstall%20PAM%20-%20Self-Hosted%7CCyberArk%20Digital%20Vault%20installation%7CIntroduction%20to%20Digital%20Vault%20installation%7CDistributed%20Vaults%20environment%7C_____0#Generalguidelines
Satelite is read-only and to avoid an split brain situation only the primary vault is connected to CPM's
Even with environments with multiple CPMs they should only ever be connected to the primary Vault therefore the answer is B. https://docs.cyberark.com/PAS/13.2/en/Content/PAS%20INST/Distributed-Vaults-Introduction.htm?tocpath=Installation%7CInstall%20PAM%20-%20Self-Hosted%7CCyberArk%20Digital%20Vault%20installation%7CIntroduction%20to%20Digital%20Vault%20installation%7CDistributed%20Vaults%20environment%7C_____0#:~:text=no%20data%20loss.-,General%20guidelines
The answer is B. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.6/en/Content/PAS%20INST/Distributed-Vaults-Introduction.htm?tocpath=Installation%7CInstall%20PAM%20-%20Self-Hosted%7CCyberArk%20Digital%20Vault%20installation%7CIntroduction%20to%20Digital%20Vault%20installation%7CDistributed%20Vaults%20environment%7C_____0