Deploy CA PAM client on VMware Horizon (VDI)

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Customer want to deploy CA PAM client app on VMware Horizon (VDI).

Normally, business application softwares are installed on virtual machine to make a golden image.
Then this image will be deployed for user when they access Horizon.

 

Same procedure for CA PAM Client App is not working as it does not launch and no logs are generated.

But when login with local admin account (same user that installed CA PAM client), he can open CA PAM client app.

Suspected that there are some problem with permissions so Read/Write permission was set for Everyone but domain users are still unable to open the app.

Environment

Release : 4.1

Resolution

It was found that customer was trying to install CA PAM Client to a special mapping called VMWare App Volumes.

Customer was able to install the app on the golden image with the default path in Program Files and it worked fine.
So the permission in default path is good enough for VDI deployment.

Additional Information

Note: This is not an officially certified (tested by QA Team) configuration but customers have reported this worked.