ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
PAM upgrade from 3.0.2 to 3.1.1 failed with "PAM-CMN-1264: Upgrade failed. Please review the audit log and then perform a system recovery" error message
Article ID: 106957
Updated On:
Products
CA Privileged Access Manager - Cloakware Password Authority (PA)
PAM SAFENET LUNA HSM
CA Privileged Access Manager (PAM)
Issue/Introduction
We attempted to upgrade PAM 3.0.2 to 3.1.1, but it failed. After reboot the following upgrade error message was observed:
PAM-CMN-1264: Upgrade failed. Please review the audit log and then perform a system recovery.
PAM-CMN-1264: Upgrade failed. Please review the audit log and then perform a system recovery.
Cause
The most likely cause is a known bug related to a failure of altering a database table during the upgrade. Whether or not a PAM instance is affected depends on the upgrade history and configuration.
If logs.bin file is collected CA Technical Support can find the following error in the installation log.
--------------
ALTER TABLE `uag`.`kdc_server`
DROP FOREIGN KEY `kdc_server_ibfk_1`
--------------
Mysql schema update of file 3.1.0_upgrade.sql failed 1, we're going to abort
If logs.bin file is collected CA Technical Support can find the following error in the installation log.
--------------
ALTER TABLE `uag`.`kdc_server`
DROP FOREIGN KEY `kdc_server_ibfk_1`
--------------
Mysql schema update of file 3.1.0_upgrade.sql failed 1, we're going to abort
Environment
PAM 3.0.2
Resolution
The CAPAM_3.0.2.17 hotfix resolves this issue.
Please go to
https://support.ca.com/us/product-content/recommended-reading/technical-document-index/ca-privileged-access-manager-solutions-patches.html
and download CAPAM_3.0.2.17 hotfix. Apply this hotfix first, and then retry the upgrade to 3.1.1.
NOTE: There has been at least one case in which the upgrade to 3.1.1 still failed after applying the hotfix. If you encounter this problem, please open a support case with CA support.
Please go to
https://support.ca.com/us/product-content/recommended-reading/technical-document-index/ca-privileged-access-manager-solutions-patches.html
and download CAPAM_3.0.2.17 hotfix. Apply this hotfix first, and then retry the upgrade to 3.1.1.
NOTE: There has been at least one case in which the upgrade to 3.1.1 still failed after applying the hotfix. If you encounter this problem, please open a support case with CA support.
Feedback
Yes
No
Powered by
