Cloud integration using ARCON key vault - As a privileged user, you can configure the ARCON key vault integration in the Control Room .

Automation 360

As a privileged user, you can configure the ARCON key vault integration in the Control Room.

Prerequisites

  • Ensure you have Manage settings and Manage connections permission to configure these settings.
  • Ensure that your network is configured to allow communication from Automation 360 Cloud servers by adding the regional IP addresses to your network’s allowed list. See Control Room IP address list for external integrations.
  • Gather the specific ARCON information required to configure the external key vault connector using the Automation 360 Control Room.
    Item Description
    Vault URL The ARCON key vault of the resource group (for example: https://pamapi-poc.arconnet.com/api/ServicePassword/GetTargetDevicePassKey).
    OAuth connection Ensure that you have created an OAuth connection. See Create OAuth connection.
    HTTP header name It contains the OAuth token set by Automation 360. By default, the header name is set to Authorization.
    Server Certificate - PEM format Obtain the SSL certificate available in PEM format. This certificate is optional and is needed only when the installer host does not trust the ARCON key vault server certificate.

ARCON key vault configuration

This procedure helps you configure integration with ARCON key vault.
  • First, set up the OAuth connection.
  • Then, configure the vault integration.

Set up OAuth Connection

Complete the following steps from the Create OAuth connection procedure.

  1. To set up the OAuth connection, navigate to Manage > OAuth Connections .
  2. Click Create Connection.
  3. On the Connection settings screen, do the following:
    • Provider type: Custom
    • Connection name: Provide any unique name to identify connection and click Next.
    • Grant type: Select the Resource Owner Password Flow grant type.
    • Client authentication method: Choose Client Authentication Secret Post.
    • Token URL: Provide the token URL to get access tokens from ARCON key vault.

      Set up OAuth for ARCON

    • Scope: This is an optional field. You can configure the scope as needed.
    • Username and Password are the user details used to authenticate with ARCON system.
      Note: If ARCON vault is configured to accept username and password in base64 encoded format, then enter the base64 encoded username and password.
  4. Click Next and then click Save changes and test connection.
  5. Click Close.

Once successful, configure the ARCON key vault and select the OAuth connection you created.

Configure ARCON key vault

Note: In Automation 360 v.41 and later, external vault configuration is available through only one of the following paths, depending on the features enabled for your environment:
  • If the Manage > External Vault option is visible, configure external vault using this flow. This flow supports configuring external vault connection in environments that use one or more external vaults.
  • If not, configure external vault using Administration > Settings > External key vault.
  1. Log in to the Automation 360 Control Room with the required permissions.
  2. Do one of the following based on the navigation path visible to you:
    • Navigate to Administration > Settings > External key vault and click the Edit icon.

      Administration path

    • Navigate to Manage > External Vault > Vaults and click the Add Vault, Add or + icon.

      Manage path

  3. Select the Arcon Key Vault.
  4. Enter the specific ARCON information described in the table given in the Prerequisite section.
  5. Click Save changes or Add Vault to save the vault configuration.
Next steps