How we can delete the old/removed login policy

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

 

How we can delete the old/removed login policy from the server ?  or any policy ?

 

 

Environment

Release : 14.0 PIM 

PAMSC   v14.10.0.1700 

Cause

The procedure below can be used to delete policies

Resolution

The procedure below can be used to manually remove policies from endpoints:

1) On the endpoint do the following via selang;

'find POLICY' and identify the policy that needs removing

2) undeploy POLICY ( policyName )

3) rr RULESET ("policyName#01") noexit

4) rr POLICY ("policyName#01") noexit

5) rr GPOLICY ("policyName")

Note that the policy version number from steps 1-2 may be different

6) run 'find DEPLOYMENT' and 'find GDEPLOYMENT' on both endpoint and DMS,

any objects that exist on the endpoint but NOT on the DMS need to be

removed from the ENDPOINT with:

rr DEPLOYMENT deploymentName

rr GDEPLOYMENT deploymentName