Best practices when upgrading/adding an utility appliance UA to PAM

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

This article is to explain some basic steps to follow to succesfully add an UA to PAM 

Resolution

In order not have problems to add the UTA instance into PAM follow this procedure :

1. If you plan to create a template of the UA for deploying to the same or other systems, make sure it is done before adding it into the PAM. If you templatize the UTA after adding it into the PAM instance the template will be having the UTA key/password rotated. When you create a UTA instance out of this template you need to reset the password from Web Console of the UTA VM to be able to add the UTA into PAM successfully.

2. Make sure the utility appliance is powered on while removing the same from PAM. So that the UTA key/password would be reset to the default one by PAM while removing it. This way the UTA can be added back in to PAM without any need to reset the password explicitly. If you power off and them remove the appliance from PAM the UTA will be removed from PAM but the UTA key will not be reset to the default.