Difference of 'Change Password on Connection End' and 'Change Password On Session End' in PVP

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

There are two similar options available in password view policy, what is the difference?
- Change Password On Connection End
- Change Password On Session End

Environment

CA Privileged Access Manager 3.x

Resolution

- Change Password On Connection End
The password is changed when the remote session (RDP/SSH) ends.

- Change Password On Session End
During the PAM session, the passwords used to log in to the target servers will be changed when the PAM session ends (log out from CA PAM GUI).
This is not effective for the passwords 'Viewed' in the CA PAM GUI on session terminations.