Troubleshoot Windows Proxy Agent v2.8 installation

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

 This document is to help CA PAM customer to troubleshoot general problems during PAM Windows proxy 2.8 installations.

The Windows Proxy Agent is a software component of the Windows Domain Service target connector for CA PAM Credential Manager. Install it to enable updating Windows-based account passwords, and updating Windows service and scheduled task log in account passwords.

Environment

Release: PAMDKT99500-2.8-Privileged Access Manager-NSX API PROXY
Component:

Resolution

 

 

1. Check if the operating system of the target server is listed as supported.

 

The following table details the supported platforms and their associated requirements for the Windows Proxy agent.

 

Windows Proxy Platform Operating System	Minimum Patch Level
Windows 7	6.1.7600
Windows Server 2008 R2	6.0.6001
Windows 8.1	Any level
Windows Server 2012 R2	Any level

 

 

2. Network check - ensure target server is accessible with PAM.

Utilize tools on PAM(config->tools) to check below.

- Ping test between PAM server and target server which Windows proxy is being installed on.

- Port 27077 should be open on the firewall.

 

3. Proxy server service check

- check if Windows Proxy is installed properly

- Check if you can see proxy server service in Windows service panel and started.

Note: PAM Proxy service name would be registered as "PAM proxy".

- Check if the installation has been finished successfully.

The Windows Proxy installation log file is located at:
C:\<install_home>\cloakware\cspmclient\Uninstall_Password_Authority_Windows_Proxy\Logs

- Change log level to Fine and restart service in Windows Proxy configuration file. see if any error message is logged in log file.

The Windows Proxy configuration file is located at:
C:\<install_home>\cloakware\cspmclient\config\cspm_client_config.xml

The Windows Proxy log file is located at:
C:\<install_home>\cloakware\cspmclient\log

 

The above checkpoints should assist you to identify and remove holdup preventing Windows Proxy agent from working. Should you required further assistance, please open ticket with CA Support.

Additional Information

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-privileged-access-management/privileged-access-manager/2-8-1/deploying/install-credential-manager-components/default-port-settings.html

https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-privileged-access-management/privileged-access-manager/2-8-1/install-a-windows-proxy-for-credential-manager.html