How can I switch management servers that my PIM endpoints connect to?

Products

• CA Virtual Privilege Manager
• CA Privileged Identity Management Endpoint (PIM)
• CA Privileged Access Manager - Server Control (PAMSC)

Issue/Introduction

How can I switch management servers that my PIM endpoints connect to without manually going to each server? 

 

Environment

12.8+ Enterprise Manager with Linux/Unix and Windows Endpoints. 

Resolution

Windows Endpoint Example to update registry for the Distribution Server connections string. This is for ReportAgent and AgentManager (SAM).

env native; chres REGVAL ("HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\AccessControl\Common\communication\Distribution_Server") STRING('ssl://SERVERA:7243,ssl://SERVERB:7243') 

Linux Endpoint Example to update accommon.ini file for the Distribution Server connections string. 

env config;er CONFIG ACCOMMON section(communication) token(Distribution_Server) value('ssl://SERVERA:7243,ssl://SERVERB:7243') 

Note, these two examples set the value listed. It doesn't update/add to the list.  

To update which DH__ the policyfetcher updates, which is the same as running the dmsmgr command, you can update them in with this syntax. 

Remove: 

so dh-(DH__@SERVERB) 

Add:

so dh+(DH__@SERVERA)

Note, if you try to remove a DH that is not set on the server the policy will fail with an error. 

Additional Information

dmsmgr -config Function: Configure Advanced Policy Management