PAM viewAccountPassword CLI command does not show password last set date

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

In the CA PAM GUI, under Credentials - Target Accounts, it is possible to view the date the password was last set for the account on the Password tab under "Password Created". This same information does not appear to be available when using the viewAccountPassword CLI command.

Environment

Privileged Access Manager, all versions

Resolution

To view the latest password updates only (not the full history) you can use

cmdName=getMostRecentPasswordHistory

 

updateDate  Will show in a readable form

updateTime Will show in unix time

 

<cw.appMessage>
<statusCode>400</statusCode>
<statusMessage>Success.</statusMessage>
<content>
<![CDATA[
<CommandResult><cr.itemNumber>0</cr.itemNumber><cr.statusCode>400</cr.statusCode><cr.statusDescription>Success.</cr.statusDescription>
<cr.result>
<AccountHistory>
  <accountID>####</accountID>
  <compromisedFlag>false</compromisedFlag>
  <historical>true</historical>
  <serverKeyId>-1</serverKeyId>
  <accountHistoryID>####</accountHistoryID>
  <userName>#####</userName>
  <password>#####</password>
  <createTime>1663189173000</createTime>
  <createDate>Wed Sep 14 20:59:33 UTC 2022</createDate>
<updateDate>Wed Sep 14 20:59:33 UTC 2022</updateDate>
  <extensionType></extensionType>
  <createUser>#####</createUser>
<updateTime>1663189173000</updateTime>
  <updateUser>super</updateUser>
  <hash>#############################</hash>
  <ID>#####</ID>
</AccountHistory>
</cr.result>
</CommandResult> ]]>
</content>
</cw.appMessage>