PAM-UI-1702: No features are currently available / PAM-CM-0039: Unable to perform operation

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

PAM End Users are occasionally presented with one or more of the following errors when logging into PAM:

PAM-UI-1702: No features are currently available
Failed to Start Access Agent
PAM-CM-0039: Unable to perform operation. Please contact System Administrator

or the error -> "Cannot decide access type"

The issue occured after enabling a thirdparty load balaced IP in front of the PAM Cluster

Cause

PAM services require session persistence between the PAM Client and the PAM Appliance in order to maintain a secure session.

Resolution

Reconfiguring the Load Balancer to ensure client session persistence resolves the issue. There are several options within each thirdparty version to allow this and PAM does not validate or have specific recomendations. Any specific configurations should be recommended by the specific load balancer vendor.