Functionality not available on the secondary site when the primary is down


Article ID: 102306


Updated On:


CA Privileged Access Manager - Cloakware Password Authority (PA) PAM SAFENET LUNA HSM CA Privileged Access Manager (PAM)


Which functionality will be and will not be available on the secondary site, when the primary is down?


Component: CAPAMX


To start with, there are differences between what you can do on a node in the primary site and a secondary site.  This can be seen easily by comparing the page an Admin will see after logging into PAM. On the secondary site members you will not see the Users, Services and Policies tabs. You will not be able to perform tasks found on those tabs on the primary site members. The users will still be able to login to the secondary site, and use any services configured on devices they use and assigned to their policies. The PAM Admins will not be able to make changes to Users, Services and Policies when the primary site members are all unavailable. Also, if the Primary site is completely down then functionality would be lost to do the following;

check-in/check-out, dual authorization, credential rotation, Service Desk integration, reason to view credentials. .

In such an instance it would be necessary to elevate the Secondary site to be primary, in order to get the functionality back.