How do the CPM and PVWA communicate?

The communication between the Central Policy Manager (CPM) and the Privileged Vault Web Access (PVWA) occurs through the vault. This process is essential for maintaining the security and integrity of the privileged accounts managed by CyberArk.

When the CPM needs to process credential management tasks, such as updating passwords or rotating them, it interacts with the secure vault, which is the central repository for storing all sensitive information, including passwords and credentials. The PVWA serves as the user interface for administrators to access these privileged accounts, and any actions that users take via the PVWA regarding these accounts will involve communication with the vault.

This method ensures that all data exchanges are securely handled and that operational integrity is maintained, preventing unauthorized access to the sensitive management processes involved in handling privileged credentials. By funneling communication through the vault, CyberArk centralizes access control and improves security by ensuring that both the CPM and PVWA rely on the vault's permissions and auditing capabilities.