CyberArk Conjur Service Broker for VMware Tanzu | Solutions Hub

CyberArk Conjur is a security service that integrates with Tanzu Application Service (TAS) and other popular tools to provide data encryption, identity management for humans and machines, and role-based access control for sensitive secrets like passwords, SSH keys, and web services. Conjur centrally manages secrets throughout the application lifecycle.

Easily Deploy Application Layer Security

Secrets managed by CyberArk Conjur are delivered securely to applications running in TAS.

No Developer Workflow Disruption

No developer impedance. Seamlessly integrated into the TAS Environment and Developer Workflow.

Secure Your Applications on TAS

Policy-based secrets management ensures application security. Integrates with CyberArk Enterprise Password Vault to provide end-to-end secrets management.

Watch

CyberArk Conjur

CyberArk Conjur Overview

CyberArk is a leading security company that proactively stops the most advanced cyber threats—those that exploit insider privileges to attack the heart of the enterprise. The company has pioneered a new category of targeted security solutions to protect against cyber threats before attacks can escalate and do irreparable business damage.

More about CyberArk Conjur

“Working with VMware Tanzu is an important step in helping organizations progress their digital transformation strategies with strong security controls that reduce risk. The integration of Tanzu with the CyberArk Conjur secrets management solution helps ensure that vitally important security functions within TAS are protected with consistent least privilege and security policy enforcement for next-generation applications, while making it easy for the development teams to do their jobs without exposing vulnerabilities that could be exploited by attackers.”

Adam Bosnian, EVP, Global Business Development, CyberArk

How It Works

To integrate with TAS, Conjur maintains the CyberArk Conjur Service Broker for VMware Tanzu tile on the Network. The service broker provides the interface between TAS applications and an existing Conjur appliance.

The integration with TAS provides a unique machine identity to each application running in a TAS space. These identities are added as hosts to Conjur policy files. You can manage secrets, roles, and privileges for the TAS applications the same as you would for other hosts.

This implementation obtains the specified secrets from Conjur and injects them into the environment of the running application.

Read the documentation