Is it possible to cleanup hosts devices in ENTM ?

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

 

Is it possible to cleanup hosts devices in ENTM ?

 

 

Environment

Release : 14.0, 14.1 all versions

Cause

Yes, the same as we delete deployments and gdeployments we can clean hnodes

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/privileged-access-manager-server-control/14-1/reference/utilities/dmsmgr-utility/dmsmgr-cleanup-function-remove-obsolete-nodes.html

Resolution

WE can use same tool as for deployments

dmsmgr -cleanup hnode

This command has the following formats:
dmsmgr -cleanup {-hnode|-deployment} -days number {-dms|-dh} name
dmsmgr -cleanup -policy name -vcount number {-dms|dh} name
-hnode
Removes HNODE objects that represent Privileged Access Manager Server Control nodes that have been unavailable for more than number days.

for instance

dmsmgr -cleanup -hnode -days 365