Symantec Privileged Access Management

  • Private Community

  • 1.  Upgrade PAM 2.8.x to 3.0.0, 3.0.2 and 3.1.1

    Posted Feb 15, 2018 10:26 PM

    Myself being new to PAM, I am going through lots of configurations and have been documenting them for my reference but I thought I'd share it here too.

     

    I wanted to capture all the steps required when you are on 2.8.x and want to migrate and upgrade to 3.1.1

     

    So this article is actually 3 parts.

     

    1. Upgrade PAM 2.8.x to 2.8.4.1

    2. Migrate PAM 2.8.4.1 to 3.0.0

    3. Upgrade PAM 3.0.0 to 3.0.1 3.0.2 3.0.3 and 3.1.1 (Now that 3.0.3 is available, that would be the upgrade path)

     

    Between Step 2 and 3, you get to add a 2nd HDD for the migration and also discard it after completing the upgrade.

     

    Here are the links to the articles.

    Upgrade PAM 2.8.3/2.8.4 to 2.8.4.1 

    PAM Upgrade from 2.8.4.1 to 3.0.0 

    PAM Upgrade from 3.0.0 to 3.0.2 and 3.1.1 

     

    I hope you find it useful.

     

    Regards,

    Kim

     

    And thanks to hansh07 who shared the steps in his article.

    Revision1: Upgrade will be going from 3.0.0 to 3.0.2 instead of 3.0.1, to avoid known issues.

    Revision2: Authentication error after upgrading to PAM 3.x ve - CA Knowledge 



  • 2.  Re: Upgrade PAM 2.8.x to 3.0.0, 3.0.1 and 3.1.1

    Broadcom Employee
    Posted Feb 15, 2018 10:52 PM

    Correction to step 3: Please use patch 3.0.2 instead of 3.0.1: 3.0.0 -> 3.0.2 -> 3.1.1. This will avoid a potential problem with LDAP user logon after the upgrade when 3.0.1 is used instead of 3.0.2.



  • 3.  Re: Upgrade PAM 2.8.x to 3.0.0, 3.0.1 and 3.1.1

    Posted Feb 15, 2018 10:55 PM

    Good point. I will update.



  • 4.  Re: Upgrade PAM 2.8.x to 3.0.0, 3.0.2 and 3.1.1

    Broadcom Employee
    Posted Mar 23, 2018 09:02 AM

    Hi Ralf,

     

    If we are going to upgrade from 2.8.3 to 2.8.4.1, then is that necessary to include all the hot fixes of 2.8.3 as part of the upgrade path?

    To frame this question in another way - if we move from 2.8.3 to 2.8.4.1, then all the hot fixes of 2.8.3 will be included in that as a cumulative release?

     

    --Lakshman



  • 5.  Re: Upgrade PAM 2.8.x to 3.0.0, 3.0.2 and 3.1.1

    Broadcom Employee
    Posted Mar 23, 2018 11:48 AM

    Hi Lakshman, This would be true for 2.8.3 hotfixes published prior to release of 2.8.4.1. There are hotfixes on top of 2.8.3 that were published later and that are not included in 2.8.4.1. I would not recommend to apply those recent hotfixes to 2.8.3 before upgrading to 2.8.4.1. If you are at 2.8.3 still, you should consider migrating to 3.X at this time. 2.8 is nearing its end of support, see https://support.ca.com/phpdocs/7/9526/9526-PAM-fix-strategy.pdf

     



  • 6.  Re: Upgrade PAM 2.8.x to 3.0.0, 3.0.2 and 3.1.1

    Posted Feb 16, 2018 08:40 AM

    Great Job!!! Thanks!

     

    Christo



  • 7.  Re: Upgrade PAM 2.8.x to 3.0.0, 3.0.2 and 3.1.1

    Broadcom Employee
    Posted Feb 27, 2018 02:36 PM

    Helpful. Thank you!