Trying to scan a server using API KEYs with qualys application you get error 401- Unauthorized

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

You need to use api keys to give credentials to qualys application to be able to scan target servers, you are trying but you are getting errors like the unauthorized. In this process are different team members involved and each of them with limited access, for this you need to use REST API.

Environment

PAM 4.2.x

Cause

You have provided wrong credentials to Qualys team, for this reason is not able to login to the target device.

Resolution

The Qualys connector initially needs to use the Rest API to get the ID of the device in PAM with the name of the server you want to scan, then get the target application(s) for this device, then get the ID of the target account with the name configured in the scan profile, and finally retrieve the password for that target account from PAM. 

This will be done for each server you want to scan.

So with REST api key you can obtain :

- ID of the device in PAM with the name of the server you want to scan
- the target application(s) for this device
- the ID of the target account with the name configured in the scan profile
- finally you retrieve the password for the target account in PAM

This is all the information you need to be able to scan servers with Qualys Application.