Reset the Config user password - Privileged Access Manager

Products

• CA Privileged Access Manager (PAM)
• CA Privileged Access Manager - Server Control (PAMSC)
• CA Threat Analytics for PAM
• CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

The config user is a special account in PAM that is used to access a secondary configuration page for initial setup and emergency use when the main page is unavailable. The config user is also used for the Upgrade Utility in 4.3.0 and above. If the password for this account is lost or forgotten, follow these procedures to reset it to the factory default.

Environment

Privileged Access Manager (PAM), all versions

Resolution

Resetting the Password

VMware Appliances:

1. Connect to the ESXi/vCenter server where the PAM appliance is hosted.
2. Open the VM Console for the CA PAM VM.
3. In the main menu, use the up/down arrows to highlight Reset Password and press Enter.
4. The password will reset to the factory default: config.

Hardware Appliances:

1. Navigate to the front LCD panel of the appliance.
2. Select the Reset Password option.
3. The password will reset to the factory default: config.

Cloud Instances (AWS/Azure):

• Unlike VMware and Hardware appliances, these do not have a local console screen for password reset.  Contact Broadcom Support for assistance.

Changing the Password After Reset

1. Navigate to the Alternate Configuration Utility URL: https://<PAM-IP>/config/
2. Log in with: User Name: config / Password: config
3. Click Change Password in the configuration menu on the left.
4. Enter your new password in the Password and Confirm fields under the "Change Config User Login Id and Password" header.
5. Click Update.

Note: If the 'Change Password' menu option is missing after login, clear your browser cache or open an incognito/private window to re-access the utility.

Additional Information

• For more information about managing the config user: Change Login for Config or Super User
• In a cluster environment, the Config password is not replicated and must be reset on each individual appliance.