"License Has Expired" Message After Logging Into PAM

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)
• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

When logging into a PAM appliance, one of the following messages is observed indicating that the license has expired. What PAM services will be impacted because of the expired license and how can they be restored?

 

PAM-CMN-1186: Symantec PAM license has expired and access services will be disabled on [date]. Please contact your Broadcom Account Representative.

 

PAM-CMN-1187: Symantec PAM license has expired and access services are now disabled. Please contact your Broadcom Account Representative.

 

Resolution

When a PAM license has reached its expiration date, there will be a grace period of 10 days before PAM services are impacted. The PAM-CMN-1186 message will be displayed during this grace period.

After the grace period, only PAM administrators will be able to login and services related to the Access page will be disabled. The PAM-CMN-1187 message will be displayed after the grace period has ended.

Refer to KB195856 - How to Create a PAM License Request for steps to download the sysinfo file from PAM appliance(s) and generate a license request on the support portal. Once the new license has been generated, the PAM administrator can logon to apply the new license(s) to restore services. If the appliances are part of the cluster, the cluster must be stopped in order to apply the new licenses.