Longer Response Times with Policy Creation both via UI and API after upgrade

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

We have noticed right after upgrading our spare prod node to 4.1.2 from 4.0.1, the policy creation is taking longer than expected.

Creating a new policy for a given device on the PAM 4.0.1 production cluster takes 5 seconds, but on the node upgraded to 4.1.2 it takes 35 seconds. If anything, we would have expected the standalone node to be faster, since no data replication is needed.

Environment

Release : 4.1

Cause

The new secrets management feature in the 4.1 release required a lot of database queries for target accounts to be updated. Some of these changes could result in poor performance in some environments will a very large number of target accounts and other credential management objects.

Resolution

This problem will be fixed in 4.1.5+ and 4.2+. If you have this problem and require a fix at a lower PAM release, please open a case with PAM Support.