The correct order is to locate the CPM_Hardening.ps1 script , run in powershell as administrator and then check the logs. https://docs.cyberark.com/PAS/Latest/en/Content/PAS%20INST/CPM-hardening-runscript.htm?tocpath=Installation%7CInstall%20PAM%20-%20Self-Hosted%7CInstall%20CPM%7CCPM%20Hardening%7CHarden%20the%20CPM%20server%7C_____0#:~:text=by%20the%20CPM-,Run%20the%20hardening%20script,-If%20you%20have https://cyberark-customers.force.com/s/article/Where-do-I-find-the-logs