CyberArk: SQL plus launch using CyberArk PAM 14.4

Connect to Oracle SQLPlus via CyberArk PSM (Privileged Session Manager)

CyberArk PSM offers secure, isolated, and monitored access to Oracle databases using SQLPlus. This article explains how to configure CyberArk PSM to enable connections to Oracle databases using SQLPlus OIC 19c.

---

 Prerequisites

To connect to Oracle databases via SQLPlus:

• Oracle Instant Client (OIC) 19c x64 is required

• Recommended version: 19.18.0 or as per Oracle compatibility matrix

• SQLPlus is typically installed automatically during PSM installation

---

 Installation and Configuration Workflow

Task	Description
1️⃣ Install Oracle Database Tools	SQLPlus + Instant Client (auto-installed with PSM)
2️⃣ Configure AppLocker	Allow SQLPlus to run on the PSM
3️⃣ Configure PSM Connection Component	Setup connection path and settings in PVWA

---

Step 1: Verify Oracle SQLPlus Installation

No manual installation is needed — SQLPlus is automatically installed during the PSM setup.

• Confirm SQLPlus is located at:

  makefile
  
  C:\oracle\instantclient\sqlplus.exe
  

---

Step 2: Configure AppLocker for Oracle SQLPlus

1. Navigate to the AppLocker configuration file:

   java
   
   C:\Program Files (x86)\CyberArk\PSM\Hardening\PSMConfigureAppLocker.xml
   

2. Remove Read-Only Attribute

   • Right-click the XML file → Properties → Uncheck "Read-only"

3. Edit the XML:

   • Open PSMConfigureAppLocker.xml

   • Find the Oracle x64 connection clients section

   • Uncomment the Oracle section by removing the lines:

     xml
     
     <!-- If relevant, uncomment this part after installing Oracle client and Toad 16 x64.
     ...
     End of oracle connections comment -->
     

4. Verify Path Accuracy:
   Ensure the paths match where sqlplus.exe is installed.

5. Save the XML file

6. Apply the AppLocker Configuration:
   Open PowerShell as Administrator and run:

   powershell
   
   CD "C:\Program Files (x86)\CyberArk\PSM\Hardening"
   ./PSMConfigureAppLocker.ps1
   

---

Step 3: Configure SQLPlus Connection Component in PVWA

1. Login to PVWA as an Admin.

2. Go to:
   Administration → System Configuration → Options

3. Expand:
   Connection Components → PSM-SQLPlus

4. Verify Target Settings:

   • Ensure the path is set correctly for SQLPlus:

     css
     
     "C:\oracle\instantclient\sqlplus.exe" "{UserName}/{Password}@{Address}[:{Port}][/{Database}] [{ConnectAs}]"
     
     
     
     
     Ref : Oracle SQL Developer | CyberArk Docs