A2A Error PAM-CM-0575 When Using ExecutionPolicy Powershell Switch

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

When calling a Powershell script and using the ExecutionPolicy switch (example below), the Privileged Access Manager A2A client returns a 409 error code. The Account Requests report shows "PAM-CM-0575: Unauthorized script name" for the error and "bypass" for the script name. When the same script is called and the ExecutionPolicy switch is not used, the script successfully runs.

> powershell.exe -NoProfile -NoLogo -NonInteractive -ExecutionPolicy bypass -file "ScriptName.ps1" <Script Parameters>

Environment

PAM A2A Client 4.3.1 and below

Cause

There was an issue in the A2A client code which caused it to incorrectly interpret "bypass" as the script name.

Resolution

The issue will be fixed as DE678816 in the 4.3.2 A2A client. As a workaround, call the Powershell script without the ExecutionPolicy switch until 4.3.2 has been released.

Additional Information

When 4.3.2 is released, the new A2A client can be downloaded from the Privileged Access Manager Solutions & Patches page.

Subscribe to this article to be updated on fix status. Refer to the How to Subscribe to a Knowledge Document for more information.