CA Performance Management 3.7.11.844 - Adobe Flash Support Issue

[Tao Yang]

We know that Adobe stopped support o Flash so some of CAPM interfaces(such as Group management) are not available.
Our administrator is working on that but it could take taime to get approve for the change and the schedule.

So I am wondering if there's an temporary alternative way that we can still config Group(such as create groups, edit groups, edit rules of the devices under that group)?

Thanks!

[Jeffrey Pinard]

Can you install an older version of the browser?

Otherwise, you need to use PC webservices.
https://techdocs.broadcom.com/us/en/ca-enterprise-software/it-operations-management/performance-management/3-7/apis/performance-center-rest-web-services/groups-web-service.html

[Catalin Farcasanu]

I heard there's a timebomb in the code of flash, so installing an older version won't do the trick. You'd have to reset the time on the machine to a date older than 31.12.2020. You might wanna try that. I did not check it, but I know other vendors that used extensively flash and are now faced with the same problems as you. They were forced to check for alternatives and this is what they came out with: changing the date on the station.

------------------------------
Senior Consultant
SolvIT Networks
------------------------------

[Tao Yang]

Thanks Jeff as always! Thanks Catalin, that's a good suggestion but changing data is not an option for me as I was not able to.

Jeff: I could only access https://MYPC_HOST:8182/pc/center/ ,
I can see a page showing Available SOAP services, and Available RESTful services.
I chose a few of the Endpoint address and WADL, none of them can return anything for me:
for example, https://MYPC_HOST::8182/pc/center/webservice/tenants
it returned "This page isn't working, If the problem continues, contact the site owner. HTTP ERROR 401".

I also tried POSTMAN, could not get any response.
Does that mean this services are not opened? 

Thank you again!

[Tim Kennedy]

Check the Enterprise Enablement portion of the Administration chapter in the Flash Player Administration Guide for a viable work around.
https://www.adobe.com/content/dam/acom/en/devnet/flashplayer/articles/flash_player_admin_guide/pdf/latest/flash_player_32_0_admin_guide.pdf

[Tao Yang]

That's something won't happen in my organization, but thank you so much Tim, I have collected this PDF.

[Jeffrey Pinard]

So the pc rest services require a local PC account (not ldap or saml account).
So if you are trying to access it with an external account, it will throw the 401 auth error.
Also, the account can't be disabled or locked out.

All the /pc/center/webservices/* use the same basic authenticator.

[Tao Yang]

Something new found from today that I can access

http://MYDA:8581/rest/groups/  and it returned a lengthy XML, but I guess that is not anything I could use to manage my GROUPs from there. 

[Jeffrey Pinard]

Yes, the DA rest services don't require authentication at this time.  In one of the next 2 20.2.x releases, we will be adding authentication to DA webservices.

But you should not be managing groups in the DA.  PC should be used for group maintenance, as we push the groups to the DA.  We don't send group changes from DA to PC for groups created in PC.

[Tao Yang]

Thank you so much Jeff!!!