Please register against a single policy server until this feature has been enhanced.
Ignore the PAM GUI where it allows you to enter multiple Policy Servers.
smreghost is required for bootstrap of SiteMinder agent in PAM to contact a Policy Server for initialization.
Once initialized, SSO Agent on PAM will be contacting Policy Servers registered in the HCO.
[SAMPLE SMHOST.CONF]
C:\Users\Administrator>type smhost.conf
#NOTE: PKCS11 crypto provider is deprecated. Please use ETPKI instead. (SmHost.conf)
#This file contains bootstrap information required by the SiteMinder Agent API to connect to Policy Servers at startup.
#Be sure the IP addresses and ports below identify valid listening Policy Servers.
#Please do not edit the encrypted SharedSecret entry.
hostname="test"
sharedsecret="{RC2}8Ao.....fHD"
sharedsecrettime="0"
enabledynamichco="NO"
hostconfigobject="hco"
#Add additional bootstrap policy servers here for fault tolerance.
policyserver="192.#.#.1,44443,44443,44443"
requesttimeout="60"
cryptoprovider="ETPKI"
fipsmode="COMPAT"
# <EOF>
As you can see above, there is only 1 line of "policyservers" entry.
Once this SmHost.conf file is generated, support engineer can help to modify the SmHost.conf on the PAM appliance to register additional bootstrap policy servers.