Symantec Privileged Access Management

  • Private Community

  • 1.  Issue While installing Windows Proxy (CA PAM)

    Posted Oct 16, 2017 04:03 AM

    Hi,

     

    We are trying to install CA privileged access management's component : Windows Proxy.

     Installation went without any issue but when we try to 

    Authenticate the Windows Proxy with two commands (Given in the documentation), it fails.

    Any possible cause , please help ?

     

    C:\Windows\system32>set CP=%CPA_AGENT_HOME%\cspmclient\lib\cspmclient.jar;%CPA_A
    GENT_HOME%\cspmclient\lib\bc-fips-1.0.0.jar

     

    C:\Windows\system32>java -classpath %CP% com.cloakware.cspm.client.ClientDaemonM
    anager authagent
    java.io.FileNotFoundException: c:\cspm\cloakware\cspmclient\config\cspm_client_c
    onfig.xml (The system cannot find the path specified)
    at java.io.FileInputStream.open(Native Method)
    at java.io.FileInputStream.<init>(Unknown Source)
    at com.cloakware.cspm.client.Configuration.initConfig(SourceFile:162)
    at com.cloakware.cspm.client.Configuration.<init>(SourceFile:82)
    at com.cloakware.cspm.client.c.<init>(SourceFile:18)
    at com.cloakware.cspm.client.ClientDaemonManager.main(SourceFile:19)

     

    Thanks in advance.

     

    ITSAT

    VOLVOCARS



  • 2.  Re: Issue While installing Windows Proxy (CA PAM)

    Broadcom Employee
    Posted Oct 16, 2017 09:20 AM

    Hello, which version of the PAM docs are you looking at? These instructions were in older doc versions, but they are wrong and have since been removed. You should not find these in the latest 2.8 or 3.0 docs such as at https://docops.ca.com/ca-privileged-access-manager/2-8-3/EN/deploying/install-credential-manager-components/install-a-windows-proxy-for-credential-manager.



  • 3.  Re: Issue While installing Windows Proxy (CA PAM)

    Posted Oct 17, 2017 04:55 AM

    So, I think our installation is fine, we have started the service as well.

    Now, when we create endpoint account, application and policies (all actions)

    When RDP session is initiated, we get error popup like

     

    Unable to connect to backend device. please contact administrator.

     

     

    ITSAT

    VOLVOCARS.



  • 4.  Re: Issue While installing Windows Proxy (CA PAM)
    Best Answer

    Broadcom Employee
    Posted Oct 17, 2017 01:21 PM

    For this type of RDP error, you want to ensure the IP address or name is correct for the target device.  Also, check firewall between PAM and the endpoint.  You can use Config -> Tools to test if port 3389 is open between PAM and the target device for RDP.