Difference of 'Change Password on Connection End' and 'Change Password On Session End' in PVP

book

Article ID: 126214

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM)

Issue/Introduction

There are two similar options available in password view policy, what is the difference?
- Change Password On Connection End
- Change Password On Session End

Password View Policy



Environment

CA Privileged Access Manager 3.x

Resolution

- Change Password On Connection End
The password is changed when the remote session (RDP/SSH) ends.

- Change Password On Session End
During the PAM session, the passwords used to log in to the target servers will be changed when the PAM session ends (log out from CA PAM GUI).
This is not effective for the passwords 'Viewed' in the CA PAM GUI on session terminations.
 

Attachments