Troubleshooting: "Failed to unload CA ControlMinder"

book

Article ID: 38172

calendar_today

Updated On:

Products

CA Virtual Privilege Manager CA Privileged Identity Management Endpoint (PIM) CA Privileged Access Manager (PAM)

Issue/Introduction

Summary:

This is a technical document that explains what to do if CA ControlMinder/Privileged Access Management is unable to unload itself.
 
[[email protected]_box]# ./secons -sk 
CA ControlMinder secons v12.81.0.1912 - Console utility Copyright (c) 2013 CA. All rights reserved. 
secons(0x1516): CA ControlMinder is not running
 
[[email protected] bin]# ./SEOS_load -u 
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_int.always -pre Ports - nothing to do ... 
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_unab.always -pre 
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_int.opt -pre Ports - nothing to do ... 
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_unab.opt -pre 
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_int.opt -post 
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_unab.opt -post 
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_int.always -post 
SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_unab.always -post 
Trying to unload CA ControlMinder... 
ERROR: Module seos is in use 
Error: CA ControlMinder kernel module could not be unloaded. 

 

Instructions: 

These commands will show you which processes are tied in with our software solution: 

'secons -sc' 

'secons -scl' 

 

After these commands start listing the associated PIDs, stop these processes / kill -15 them.  Once they're killed, you can run 'secons -sk' to stop and kill the process of PIM, and then the solution is prepared to be unloaded from the kernel per 'SEOS-load -u'.  Or you can reboot the server so that the kernel module is cleared from the machine so you can complete the uninstallation.  Now you should be able to run the 'rpm -e package' without any problems.  Of course, this last step is if you are trying to uninstall the solution.

Environment

Release: ACP1M005900-12.9-Privileged Identity Manager
Component: