PAMSC: CAPKI installation error on RHEL7

Products

• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

When install PAMSC 14.1 on RHEL7, installing CAPKI will cause error:

 

-----
CA Privileged Access Manager Server Control sechkey v14.10.0.1119 - internal key changer
Copyright (c) 2018 CA. All rights reserved.
Failed with error code 0x2a023
ETPKI error stack: 
-  Empty or NULL serial number
-----

 

Environment

Release : 14.1

Component : PAM SERVER CONTROL ENDPOINT UNIX/LINUX

Cause

When PAMSC installs CAPKI, it retrieves MAC address of the server using ifconfig command and stores it in SERIAL of <SEOSDIR>/data/crypto/sub_cert_info file.
On RHEL7, ifconfig command is not installed with the minimal server installation. It causes that installer cannot retrieve MAC address of the server and result in Empty or NULL serial number.

 

Resolution

1. install ifconfig command via OS package before installation

2. install CAPKI manually after installation