CyberArk Vault Server application is installed with a self signed certificate and as a result the Vault Server application gives a warning on launch with a reminder to use a CA signed certificate.

In this post, we will go through the steps to generate the certificate request, get it signed from Certificate Authority, install the signed certificate and finally validating the certificate.

Upon launching the CyberArk Vault Server Application a warning is given as per below if the certificate is a self signed certificate:

This warning comes up every time the CyberArk Vault Server application is started with a self signed certificate.

CyberArk provides a built-in utility to help generate the certificate request.
We can also use the Windows certificate generation utility as well but CyberArk utility makes it much easier.

The utility is called “CACert.exe” and is located under the CyberArk Vault Server installation folder.
By default, this folder is “C:\Program Files (x86)\PrivateArk\Server”

1. Open command prompt as an administrator and navigate to “C:\Program Files (x86)\PrivateArk\Server”
2. Run the command  “CACert.exe request” and follow the prompts