Configure Database Integration

Tenable Security Center provides full database support for Lieberman. Enable the plugins in the scanner to display them in the output.

To configure database integration:

  1. Log in to Tenable Security Center.
  2. Click Scanning > Credentials (administrator users) or Scans > Credentials (organizational users).

    The Credentials page appears.

  3. Click Add.

    The Credential Templates page appears.

  4. In the Miscellaneous, API Gateway, Database, SNMP, SSH, or Windows, or Web Authentication sections, click the tile for the specific method you want to configure.

    The Add Credentials configuration page appears.

  5. In the Name box, type a name for the credentials.
  6. In the Description box, type a description for the credentials.
  7. (Optional) Type or select a Tag. For more information, see Tags in the Tenable Security Center User Guide.
  8. Configure each option for the Database authentication.

    The following table describes the additional options to configure when using Lieberman as the Authentication Method for Apache Cassandra, IBM DB2, SQL Server, MySQL, Oracle Database, PostgreSQL, or Sybase ASE database credentials.

    Option Description

    Required

    Delinea Secret Name

    The value of the secret on the Delinea server. The secret is labeled Secret Name on the Delinea server.

    yes
    Delinea Host The Delinea Secret Server IP address or DNS address. yes
    Delinea Port The port on which Delinea Secret Server listens. yes
    Delinea Authentication Method

    Indicates whether to use credentials or an API key for authentication. By default, credentials are selected.

    • Platform
    • Credentials
    • An API key

    Note: By default, Credentials is selected.

    yes
    Delinea Login Name

    The username to authenticate to the Delinea server.

    Yes. Authentication Method: Credential
    Delinea Password

    The password to authenticate to the Delinea server. This is associated with the Delinea Login Name you provided.

    Yes. Authentication Method: Credential

    Delinea API key

    The API key provided by Delinea Secret Server.

    Yes. Authentication Method: An API Key
    Delinea Platform Host

    The Delinea Platform Host IP address or Domain name.

    Yes. Authentication Method: Platform
    Delinea Platform Port

    The Delinea Platform Port for authentication requests. By default, Tenable uses 443

    Yes. Authentication Method: Platform
    Delinea Service Account ID

    The application account Delinea platform REST API

    Yes. Authentication Method: Platform
    Use SSL Enable if the Delinea Secret Server is configured to support SSL. no
    Verify SSL certificate If enabled, verifies the SSL Certificate on the Delinea server. no
  9. Click Submit.

    Tenable Security Center saves your configuration.

What to do next:

  • Next, follow the steps to Add Credential to a Scan.