Database Integration

Tenable provides full database support for Tenable for Delinea.

Required User Role: Standard, Scan Manager, or Administrator

  1. Log in to your Tenable user interface.

  2. In the upper-left corner, click the Menu button.

    The left navigation plane appears.

  3. In the left navigation plane, click Scans.

    The Scans page appears.

  4. In the upper-right corner of the page, click the Create a Scan button.

    The Select a Scan Template page appears.

  5. Select a scan template.

    The scan configuration page appears.

  6. In the Name box, type a name for the scan.

  7. In the Targets box, type an IP address, hostname, or range of IP addresses.
  8. (Optional) Add a description, folder location, scanner location, and specify target groups.

  9. Click the Credentials tab.

    The Settings pane appears.

  10. Click the Database option.

    The Database options appear.

  11. In the Database Type drop-down box, select Cassandra, Oracle, DB2, MongoDB, PostgreSQL, MySQL, SQL Server, or Sybase ASE.

  12. In the Auth Type drop-down box, click Tenable for Delinea Secret Server.

    The Tenable for Delinea Secret Server options appear.

  13. Configure each option for the Database authentication.

    Option Description

    Required
    Delinea Secret Name

    The value of the secret on the Delinea server. The secret is labeled Secret Name on the Delinea server.

    		 yes
    Delinea Host The Delinea Secret Server IP address or DNS address. yes
    Delinea Port The port on which Delinea Secret Server listens. yes
    Delinea Authentication Method Indicates whether to use credentials or an API key for authentication. By default, credentials are selected. yes
    Delinea Login Name

    The username to authenticate to the Delinea server.

    		 yes
    Delinea Password

    The password to authenticate to the Delinea server. This is associated with the Delinea Login Name you provided.

    yes
    Delinea API key

    The API key provided by Delinea Secret Server.

    		 yes
    Use SSL Enable if the Delinea Secret Server is configured to support SSL. no
    Verify SSL certificate If enabled, verifies the SSL Certificate on the Delinea server. no

  14. Do one of the following:

    • If you want to save without launching the scan, click Save.

    • If you want to save and launch the scan immediately, click Save & Launch.

      Note: If you scheduled the scan to run at a later time, the Save & Launch option is not available.

  1. Log in to Tenable Security Center.

  2. Click Scanning > Credentials (administrator users) or Scans > Credentials (organizational users).

    The Credentials page appears.

  3. Click Add.

    The Credential Templates page appears.

  4. In the Miscellaneous, API Gateway, Database, SNMP, SSH, or Windows, or Web Authentication sections, click the tile for the specific method you want to configure.

    The Add Credentials configuration page appears.

  5. In the Name box, type a name for the credentials.
  6. In the Description box, type a description for the credentials.
  7. (Optional) Type or select a Tag. For more information, see Tags in the Tenable Security Center User Guide.

  8. Configure each option for the Database authentication.

    Option Description

    Required
    Delinea Secret Name

    The value of the secret on the Delinea server. The secret is labeled Secret Name on the Delinea server.

    		 yes
    Delinea Host The Delinea Secret Server IP address or DNS address. yes
    Delinea Port The port on which Delinea Secret Server listens. yes
    Delinea Authentication Method Indicates whether to use credentials or an API key for authentication. By default, credentials are selected. yes
    Delinea Login Name

    The username to authenticate to the Delinea server.

    		 yes
    Delinea Password

    The password to authenticate to the Delinea server. This is associated with the Delinea Login Name you provided.

    yes
    Delinea API key

    The API key provided by Delinea Secret Server.

    		 yes
    Use SSL Enable if the Delinea Secret Server is configured to support SSL. no
    Verify SSL certificate If enabled, verifies the SSL Certificate on the Delinea server. no

  9. Click Submit.

    Tenable Security Center saves your configuration.