Updating NetPasswordSDK.dll to match the version CyberArk CP required

Applies to:

• SecureAuth IdP

Deployment model:

On Premises / Hybrid/Cloud

SecureAuth IdP Version - All

Description - Steps to upgrade the stock SecureAuth NetPasswordSDK.dll to match version of CyberArk CP.

Error:

CyberArk Credential Provider provide corrupted ciphertext instead of correct service account password causing service account locked.

Cause:  

NetPasswordSDK.dll version used by your application (SecureAuth) does not match the version expected by the CyberArk Credential Provider (CP).

Resolution –

• Copy NetPasswordSDK.dll provided by CyberArk Credential provider installation folder.
• Get the Public Key from the file detail section.
• Backup D:\SecureAuth\SecureAuthX\bin\NetPasswordSDK.dll
• Paste the file (NetPassowordSDK.Dll) copied from Credential Provider installation folder.
• Edit Machine.config
• For .NET Framework 4.x (64-bit): %WINDIR%\Microsoft.NET\Framework64\v4.0.30319\Config\machine.config
• For .NET Framework 4.x (32-bit): %WINDIR%\Microsoft.NET\Framework\v4.0.30319\Config\machine.config

• Add/Update the Configuration: Insert the following XML block inside the <configuration> tag, specifically within the <runtime>/<assemblyBinding> section:

• To update your machine.config with a binding redirect for the CyberArk NetPasswordSDK.dll, you must include the publicKeyToken in the section to properly identify the strongly-named assembly. 
• The correct publicKeyToken for CyberArk's NetPasswordSDK is 40be1dbc8718670f
• Version Format: While version 12.6 is the release, the newVersion attribute typically requires the full four-part assembly version (e.g., 12.6.0.0). Check the properties of your specific NetPasswordSDK.dll to confirm the exact build version.
• Token Verification: If the redirect fails, you can verify your specific file's token by running the command sn -T NetPasswordSDK.dll in a Visual Studio Developer Command Prompt.

Note: Following a SecureAuth Server upgrade, it is imperative to update the machine.config file to ensure assembly redirection and configuration settings align with the newly deployed NetPasswordSDK.dll version.