Installing the PAM client on workstations without internet access

book

Article ID: 111772

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM)

Issue/Introduction

Sometimes, we may have to install the PAM Client on workstations not having internet access due to internal security restrictions or policies.

Where can we download the PAM Client from?

Cause

By default the PAM client download links point to files in the cloud. If the workstation doesn't have direct internet access, these download links will not work.

Environment

Any workstation supported by the PAM client, see page Supported Environments, using the version dropdown list to select your PAM server version.

Resolution

The public location of the PAM client installer files is https://d21oi5tjuccwe.cloudfront.net. Accessing that link directly from a host with internet access will give a list of files available for download. One way is to get the file downloaded on a node with internet access and then transfer the installer file to a location accessible from the intranet.

Alternatively, the PAM administrator can setup a private CA Delivery Network (CDN) in their local intranet environment following instructions on documentation page Use a Private Delivery Network to Distribute the Client Installer. This will require the PAM admin to download the files of interest from the cloud. Once this delivery network is configured, when a user accesses the PAM login page with a browser and downloads the PAM client installer, it will be retrieved from the CDN rather than the cloud.

Sample public download URLs:

https://d21oi5tjuccwe.cloudfront.net/ca-pam/install/win/CAPAMClientInstall_V4.0.1.exe (windows installer for 4.0.1)

https://d21oi5tjuccwe.cloudfront.net/ca-pam/install/mac/CAPAMClientInstall_V4.0.1.zip (Mac OS installer for 4.0.1)

https://d21oi5tjuccwe.cloudfront.net/ca-pam/install/linux64/CAPAMClientInstall_V4.0.1.bin (Linux installer for 4.0.1)

 

Note that the PAM client upgrades or downgrades itself dynamically once connected to a specific PAM server/release. Therefore you do not have to install the PAM client version matching the PAM server release. This upgrade/downgrade does NOT require internet access.

Platform-specific installation instructions are found on page Deploy the PAM Client.