Symantec Privileged Access Management

  • 1.  How to download or Copy the Global Configuration File for PAM

    Posted Dec 15, 2017 09:10 AM

    Hi All,

     

    How we can download or Copy the Global Configuration File for PAM?

     

    Thanks,

    Praveen Kushwaha



  • 2.  Re: How to download or Copy the Global Configuration File for PAM
    Best Answer

    Broadcom Employee
    Posted Dec 15, 2017 11:32 AM

    You are able to generate & download configuration files from the Config > Database section.

     

    Here is the relevant documentation:

    3.x: Configuration and Database Backups - CA Privileged Access Manager - 3.0.2 - CA Technologies Documentation 

    2.x: Configuration and Database Backups - CA Privileged Access Manager - 2.8.3 - CA Technologies Documentation 

     

    If you have any questions after reviewing the documentation please let me know.

     

    One warning about using the config backup:

    The config backup contains IP Address information. It is possible to restore a backup from Appliance A to Appliance B, but you should be aware that this will include IP information, which could result in the Appliance becoming inaccessible or trying to use the same IP as another Appliance. If you do run into this situation, you should be able to change the IP to a usable IP from either the VM Console or the LCD Screen on the hardware appliances.

     

    Regards,

    Christian Lutz

    Support Engineer

    CA Technologies - North America



  • 3.  Re: How to download or Copy the Global Configuration File for PAM

    Posted Dec 15, 2017 12:17 PM

    Christian is correct.  I just have a couple of things to add.  The cfg file also contains any routes you may have manually added.  If you do restore a cfg from another system you will have to go to the routes configuration and adjust them, if necessary.  It is also important to remember that when you restore a cfg file the various menus are populated, but any passwords are not.  You will have to enter those.  Some of the items that would be affected are the LDAP configuration and the recording mount, if you are using a cifs mount.  There may be others, so be sure to check the config menus after you restore the cfg.