CyberArk integration error


#1

I followed the instruction above, and provisioned my robots again, without typing in the password, restarted the cyberark service.

The error is just a generic access error, same when you have the wrong password:
Info: “Executor start process failed, reason System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))\r\n at UiPath.UiSystemClass.OpenInteractiveWindowsSession(String bstrUser, String bstrPassword, UiOpenSessionFlags nFlags, String bstrApplication, String bstrAppArguments, Int32 nDelayMs, Int32 userToken, UiGenericOptions options)\r\n at UiPath.Core.Setup.OpenInteractiveWindowsSession(String username, String password, OpenSessionFlags flags, String application, String arguments, Int32 userToken, Int32 preferredWidth, Int32 preferredHeight, Int32 preferredDepth)\r\n at UiPath.Service.Impl.Executor.StartProcessInSession(Guid executorInstanceId, String username, String password, SettingsDictionary execSettings, IntPtr userToken)\r\n at UiPath.Service.Impl.Executor.<>c__DisplayClass15_1.<b__0>d.MoveNext()”

I have already verified that the robot on that PC would work if I type in the password in Orchestrator without using CyberArk. I also verified from the Orchestrator server, I can pull the password correctly using CyberArk API:
C:\CyberArk\ApplicationPasswordSdk>CLIPasswordSDK GetPassword /p AppDescs.AppID=“UG2L_DEV” /p query=“SAFE=PER_020194_DEV;FOLDER=Root;OBJECT=Operating System-WinDomain-vanguard.com-UG2L” /o Password

The above command will return the correct password that would work if typed in Orchestrator.

Please help if anyone have experience with CyberArk integration. The version of provider is v9.95,

Thanks in advance,


#2

I forgot to mention, the Orchestrator is installed in an AWS instance, and robot is on prem. Scheduling was working properly before CyberArk was integrated.