Rights required to run and update CA PAM client in windows

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

In any CA PAM environment, the PAM server version would get upgraded as per the requirement of the organization.
When such a move happens, the CA PAM client application would upgrade itself to match the major version of CA PAM server.
Upgrade of CA PAM client does not need any downtime.

When the users connecting to a new version of CA PAM server using CA PAM client, the PAM client application does perform an upgrade operation.
What permissions are required for the regular user to complete the upgrade successfully and which files would be downloaded from the CA PAM server?
Are any registry keys as well involved during the CA PAM client upgrade process?

Environment

This can be either a standalone CA PAM server or a cluster of CA PAM servers.
 

Resolution

The user who is using CA PAM client needs to have "Full Permission" to the location where CA PAM client is installed on the users host.
The write permission would allow the download of the required files and upgrade the CA PAM client to the CA PAM server level.
The files that are downloaded are .jar files.
There are no registry keys updates involved in upgrade of CA PAM client.

The full permissions are required for the user account that would be executing the CA PAM client.