ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Cannot update global password view policy (pvp) banner. Some PVPs updating with custom banner, others do not.

book

Article ID: 237650

calendar_today

Updated On:

Products

CA Privileged Access Manager (PAM)

Issue/Introduction

Cannot update global password view policy banner.  This weekend we attempted to update the verbiage in the Credential Manager settings.  However, while it saves with no issue, the new banner is not appearing for anyone when attempting to check out an account.  

 

Environment

Release : 3.4.6

Component : PRIVILEGED ACCESS MANAGEMENT

Resolution

The new feature of custom banners were added to 3.4.2:

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/privileged-access-manager/3-4-2/release-information/new-features-and-enhancements-in-3-4-2.html

Behavior:

1. All new PVPs will update with the configured custom banner (Credential Manager settings\Banner).

2. If custom banner set, existing banners will keep their existing "Password View Request Banner".  New custom banner will not be used (this is correct behavior)

3.  If PVPs older than 3.4.2. The custom banner will be used as the new feature was added to 3.4.2.  Any versions before will not have a banner set so custom banner is added. 

This explains why some pvps update with the custom banner and some pvps keep there existing.  When seen this shows as a sporadic behavior where some pvps update the banner and others do not.