Troubleshooting: "Failed to unload CA ControlMinder"

Products

• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)
• CA Privileged Access Manager (PAM)

Issue/Introduction

Summary:

This is a technical document that explains what to do if CA ControlMinder/Privileged Access Management is unable to unload itself.

 

[[email protected]_box]# ./secons -sk 

CA ControlMinder secons v12.81.0.1912 - Console utility Copyright (c) 2013 CA. All rights reserved. 

secons(0x1516): CA ControlMinder is not running

 

[[email protected] bin]# ./SEOS_load -u 

SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_int.always -pre Ports - nothing to do ... 

SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_unab.always -pre 

SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_int.opt -pre Ports - nothing to do ... 

SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_unab.opt -pre 

SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_int.opt -post 

SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_unab.opt -post 

SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_int.always -post 

SEOS_load: Executing un/load exit file, /opt/CA/AccessControl/exits/LOAD/SEOS_unload_unab.always -post 

Trying to unload CA ControlMinder... 

ERROR: Module seos is in use 

Error: CA ControlMinder kernel module could not be unloaded. 

 

Instructions: 

These commands will show you which processes are tied in with our software solution: 

'secons -sc' 

'secons -scl' 

 

After these commands start listing the associated PIDs, stop these processes / kill -15 them.  Once they're killed, you can run 'secons -sk' to stop and kill the process of PIM, and then the solution is prepared to be unloaded from the kernel per 'SEOS-load -u'.  Or you can reboot the server so that the kernel module is cleared from the machine so you can complete the uninstallation.  Now you should be able to run the 'rpm -e package' without any problems.  Of course, this last step is if you are trying to uninstall the solution.

Environment

Release: ACP1M005900-12.9-Privileged Identity Manager
Component: