Impact of ARCOT_HOME/bin folder location on PATH variable on Advanced Authentication Servers

Products

• CA Strong Authentication
• CA Advanced Authentication
• CA Advanced Authentication - Risk Authentication (RiskMinder / RiskFort)
• CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)
• CA Risk Authentication

Issue/Introduction

While installing the Risk Authentication/Strong Authentication Services on the system, the PATH environment variable is updated with <ARCOT_HOME>\bin folder location.

How does including the ARCOT_HOME/bin folder location in the PATH variable affect the functioning of the AA services?

 

Environment

Symantec Advanced Authentication 9.1.x

Windows

Resolution

This was introduced to facilitate the administrator to run the server instances from command line and is also utilized during dbutil tool execution. 
If there are concerns raised by the internal vulnerability team, there is no harm in removing these values from the PATH variable.

Before using the dbutil tool, you can explicitly set the <ARCOT_HOME>\bin path from the command line as shown below:
set PATH=%PATH%;%ARCOT_HOME%\bin