Running a CA PAM Windows Proxy in a newer version than the CA PAM server it tries to register to

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

The question arises whether it is possible to run a CA PAM Proxy in forward compatibility mode.

That is, one has a CA PAM Proxy version installed which is newer that the CA PAM server that it wants to report to.

Environment

CA PAM all versions up to 4.1.5

Resolution

No, it is not possible to run CA PAM Proxy against a CA PAM Server which is in an older version as the Proxy itself. When the PAM Proxy starts and reports to the CA PAM server, it does a version check and will it reject a PAM Proxy with a newer version than its own.