Centrify Powershell Utility Installation

Check the Prerequisites

• Download the Centrify AWS Utility
• Set up the AWS Powershell Utility V10
• Configure AWS SAML

Install the Centrify Powershell Utility

1. Download the AWS powershell utility zip file.
2. Unzip the file into a new folder.
3. Open the Powershell prompt in Administrator mode.
4. Run Set-ExecutionPolicy Unrestricted to enable the scripts.
5. Run [System.Net.ServicePointManager]::SecurityProtocol and check for TLS12 in the resulting output. If there no TLS12 in the protocol list, run the following commands.

$AllProtocols = [System.Net.SecurityProtocolType]'Ssl3,Tls,Tls11,Tls12'
[System.Net.ServicePointManager]::SecurityProtocol = $AllProtocols

6. If you are working behind a proxy server, run the following commands to enable your Powershell session to use proxy credentials.

$webclient=New-Object System.Net.WebClient
$creds=Get-Credential
$webclient.Proxy.Credentials=$creds

7. Run one of the following commands:

.\CentrifyAuthenticate.ps1 –Tenant <Tenant.centrify.com> -Location “\absolute_path\aws\credentials”

.\ca.ps1 -Tenant <Tenant.centrify.com> -Location “\absolute_path\aws\credentials”

📘

Note:

• Both Tenant and Location parameters are optional
• Tenant by default points to devdog.centrify.com
• Default AWS region needs to be set using a different command. See step 14.
• Location specifies the absolute path of the AWS credentials file
• If location is not specified, the default location USER_HOME/.aws/credentials is used

8. Enter your Centrify credentials for authentication. Note: Credentials may be a MFA per user configuration.
9. Once authenticated, all authorized AWS applications are listed.
10. Choose an application by entering the number of the application.
11. Running an application will generate a SAML. The SAML will be posted to AWS for its credentials. See AWS SAML for more information.
12. Choose an AWS role.
13. If the inputs are correct, the AWS credentials will be saved in the profile <ProfileName>. Use <ProfileName> to run AWS commands. For example:

Get-S3Bucket -ProfileName <ProfileName>

14. To set your default region, use the following AWS commands.

Set-DefaultAWSRegion -Region <region>
Where region = us-east-1, us-west-1 etc.