CA PAM API cannot login successfully. PAM-CMN-2275 and PAM-CM-0574

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

An API key target account was configured per the documentation, but it is unable to login when used in Rest API commands. When checking the session logs, the following error is observed.

PAM-CMN-2275: Unable to retrieve Password Authority password for username CN=<USERNAME>  Error: PAM-CM-0574: Missing required parameter: referenceCode.

Environment

Privileged Access Manager 4.0.x, 4.1.x

Cause

The API key's target account was configured with a password view policy that has "reason required for view" enabled. This option cannot be used with API keys.

Resolution

Configure the API key target account to use a PVP without any "reason required" options enabled.