Is the AWS Elastic Load Balancing supported? The "Failed to start Access Agent" shows up when login.

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

After deployed the PAM and checked it worked without any problem, it sets the external load balancer(AWS Elastic Load Balancing:ELB) and tried to login the PAM via the load balancer by browser.

Then, the following error message showed up and could not login the PAM.
 

”Failed to start Access Agent”

 

The source IP should be set to the persistence but the ELB seems not to be such settings. Instead, the "No limitation" is set to the cookie's due date. The SSL pass-through settings on the LB was effective. But the problem still occurs.

What should we do in order to avoid the problem?

Environment

CA Privileged Access Manager 3.x

Resolution

The AWS ELB that uses the sticky session cannot be used as load balancer to PAM. It is not supported for sticky sessions.