PAM : Boot the hardware appliance with backup image

Products

• CA Privileged Access Manager (PAM)
• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

After upgrade, hardware appliance fails to boot.

Environment

Component : 304L / 404L PAM appliances

Tools needed:

RS232 to RJ45 serial cable

 

If the computer (laptop) doesn't have a serial port, the RS232 serial adapter is needed:

Resolution

 

PAM physical appliances have two SSDs, a primary on which PAM runs and a Secondary containing a backup image.  The backup image is written any time a patch requiring a reboot is installed. Bear in mind that PAM can only go back to whatever is on that backup disk, so be careful about doing that.  You don't want to inadvertently overwrite a recovery image you wish to maintain

Customer to find an RS232 to RJ45 serial cable and connect one side to PAM console and the other side to his laptop.

Steps to follow:

1. Power down unit
2. Connect the serial cable to the RJ45 socket marked "Console" and to a computer where you have a console viewing client.
3. Launch putty and set connection speed to 115200, data bits is 8, stop bits is 1 and Parity is none.
4. During the reboot process, hold down the Delete key to enter Setup.
5. On the Setup screen arrow down to Advanced BIOS Feature and press Enter.
6. On the Advanced BIOS Features screen arrow down to Hard Disk Boot Priority and press Enter.
7. Use the "-" to move CH0 down so CH1 becomes the boot and press F10 to save the change.
8. When prompted to Save SMOS and Exit, press the "Y" key and then Enter.
9. PAM will restore the most recent Backup file from Ch1 to Cho and reboot.
10. Immediately hold down Delete and repeat Step 4 to 9 above, reversing the boot order change.
11. PAM will reboot, and the Restoration will be complete.

Additional Information

PAM physical appliances have two SSDs, a primary on which PAM runs and a Secondary containing a backup image.
The backup image is written any time a patch requiring a reboot is installed.