What is required to enable access over SSH to a Unix account through both PSM and PSMP?

In CyberArk, platforms define the management policies and connection methods for accounts. To enable a specific connection method, the corresponding Connection Component must be associated with the platform. For SSH connections initiated from the PVWA (web interface), the PSM-SSH component is required. For direct SSH connections from a native client, the PSMP-SSH component is necessary. To allow a user to connect to the same Unix account using either method, the platform managing that account must have both the PSM-SSH and PSMP-SSH connection components configured and active.

B. SSH fingerprint storage is a host key verification security feature to prevent man-in-the-middle attacks, not the primary configuration step to enable the connection methods.

C. In modern CyberArk versions, enabling PSMP for a platform is achieved by adding the PSMP-SSH connection component, not by a simple 'Enable PSMP' toggle.

D. Creating a duplicate platform is incorrect and inefficient. Both connection components can and should be configured on the single, authoritative platform managing the account.

1. CyberArk Privileged Access Security Documentation v12.6

"Connect through PSM for SSH"

Section: "Configure the PSM for SSH connection component".

This section explicitly states: "To enable users to connect to target machines through PSM for SSH

you must add the PSM for SSH connection component to the relevant platforms." It then details the procedure for adding the PSMP-SSH component.

2. CyberArk Privileged Access Security Documentation v12.6

"Platform Management"

Section: "Connection Components".

This document explains the core concept: "Connection components are the part of the platform that enables users to connect to remote machines... To enable users to connect with a particular account

the relevant connection component must be configured in the platform that manages the account." This principle applies to both PSM-SSH and PSMP-SSH.

3. CyberArk Privileged Access Security Documentation v12.6

"Privileged Session Management"

Section: "Configure PSM".

This section describes the general configuration for PSM

including the requirement to associate connection components like PSM-SSH with platforms to enable connections through the PVWA interface.