When installing PAM SC on endpoints, do we have to explicitly add both the "Utility Appliances" in "DH_NAME" ?

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

We've setup Symantec PAM 4.0 In PROD we have 2 Utility Appliance servers. While configuring I have added both Utility Appliance in the same "Utility Group" too.

When installing PAM SC on endpoints, do we have to explicitly add both the "Utility Appliances" in "DH_NAME" ?

Environment

Release : 4.x

Component :

Resolution

If you have multiple utility servers you will need to define each utility server as a DH__ for your policies and each for Distribution_Server if you want to have failover at the endpoint. You do not need to define all utility servers in the group but it does make sense for full fault tolerance. Also keep in mind that the order in which you define these on the endpoint will matter so you can control the load going to each utility server by setting the order differently on your endpoints.