PAM viewAccountPassword CLI command does not show password last set date

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

In the CA PAM GUI, under Credentials - Target Accounts, it is possible to view the date the password was last set for the account on the Password tab under "Password Created". This same information does not appear to be available when using the viewAccountPassword CLI command.

Resolution

To view the latest password updates only (not the full history), use the getMostRecentPasswordHistory CLI command. The updateDate value will show the time in a human readable form while the updateTime will show it in Unix time.

<cw.appMessage>
<statusCode>400</statusCode>
<statusMessage>Success.</statusMessage>
<content>
<![CDATA[
<CommandResult><cr.itemNumber>0</cr.itemNumber><cr.statusCode>400</cr.statusCode><cr.statusDescription>Success.</cr.statusDescription>
<cr.result>
<AccountHistory>
  <accountID>####</accountID>
  <compromisedFlag>false</compromisedFlag>
  <historical>true</historical>
  <serverKeyId>-1</serverKeyId>
  <accountHistoryID>####</accountHistoryID>
  <userName>#####</userName>
  <password>#####</password>
  <createTime>1663189173000</createTime>
  <createDate>Wed Sep 14 20:59:33 UTC 2022</createDate>
<updateDate>Wed Sep 14 20:59:33 UTC 2022</updateDate>
  <extensionType></extensionType>
  <createUser>#####</createUser>
<updateTime>1663189173000</updateTime>
  <updateUser>super</updateUser>
  <hash>#############################</hash>
  <ID>#####</ID>
</AccountHistory>
</cr.result>
</CommandResult> ]]>
</content>
</cw.appMessage>