# Chef Infra & CyberArk integration using client cert authentication

**URL:** <https://discourse.chef.io/t/chef-infra-cyberark-integration-using-client-cert-authentication/16289>\
**Category:** Chef Infra (archive)\
**Created:** [November 27, 2019, 5:14pm UTC](https://discourse.chef.io/t/chef-infra-cyberark-integration-using-client-cert-authentication/16289 "2019-11-27T17:14:28Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![dave12345](https://avatars.discourse-cdn.com/v4/letter/d/3e96dc/32.png) [@dave12345](https://discourse.chef.io/u/dave12345)\
**Post date:** [November 27, 2019, 5:14pm UTC](https://discourse.chef.io/t/chef-infra-cyberark-integration-using-client-cert-authentication/16289/1 "2019-11-27T17:14:28Z")

</div>

Hi fellow Chefs !!!

Secrets management time ....

Is anyone using Chef Infra (config) and CyberArk for secrets management using client cert authentication?

Currently the [CyberArk supermarket cookbook](https://supermarket.chef.io/cookbooks/cyberark) doesn't support client cert authentication ... only username / password which we cannot use. Potentially using [CredentialRetriever](https://www.powershellgallery.com/packages/CredentialRetriever) PowerShell module could work using cert authentication. Chef cookbook recipe could then just call this ...

As Chef and CyberArk are well known in their respective fields of Configuration Management and Secret Management wondered how others have tackled this?

We're probably over engineering this - fellow Chefs ... help! Others must be using this combo successfully and easily ...

Many thanks

David