How Does Enterprise Management Upgrade a Policy?

Products

• CA Privileged Identity Management Endpoint (PIM)
• CA Virtual Privilege Manager
• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

When a policy is upgraded to a new version and deployed to the endpoints, how does the upgrade occur?

Environment

ControlMinder 12.8
Privileged Identity Manager 12.9, 14.0
Privileged Access Manager 14.0, 14.1

Resolution

When a policy is upgraded from one version to another, PIM will run the undeploy script from the previous version before running the deploy script for the new version. For example, version 3 of a policy gets deployed to the endpoints. When an endpoint receives the deployment for version 3, it will first run the undeploy script from version 2 before running the deploy script for version 3. This is why it is essential to ensure that the undeploy policy scripts get maintained the same way that deploy scripts do.