How to modify the list of assigned Proxies in a Target Application using the CLI

Products

• CA Privileged Access Manager (PAM)
• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

Team installed PA proxy on two servers and need to update 2000 applications. They have to remove existing proxy and add new proxy to all 200 applications. Because of a large number of application they have to update, they are requesting to update all applications using CLI batch command

Resolution

First setup one sample Target Application manually in the GUI.

Then run the CLI

cmdName=searchTargetApplication

Use TargetApplication.type=windows to retrieve only target applications of type Windows Proxy

...

<ID>2001</ID>

...

as well the IDs of the Proxies currently assigned to it, e.g.

...

<Attribute.agentId>1002,2001</Attribute.agentId>

...

To modify the list of assigned proxies in the relevant Target Application run in the CLI

cmdName=updateTargetApplication TargetApplication.ID=2001 TargetApplication.type=windows Attribute.agentId=1002

If you have more than one proxy which you want to assign you have to enclose them in quotation marks (when running the CLI in a Windows CMD), e.g.

cmdName=updateTargetApplication TargetApplication.ID=2001 TargetApplication.type=windows Attribute.agentId="1002,2001"

Additional Information

Windows Proxy Target Connector CLI Configuration

Add Windows Proxy Target Applications and Accounts

Search Target Application