Difference of 'Change Password on Connection End' and 'Change Password On Session End' in PVP

Document ID : KB000126214
Last Modified Date : 05/02/2019
Show Technical Document Details
Question:
There are two similar options available in password view policy, what is the difference?
- Change Password On Connection End
- Change Password On Session End

Password View Policy
Environment:
CA Privileged Access Manager 3.x
Answer:
- Change Password On Connection End
The password is changed when the remote session (RDP/SSH) ends.

- Change Password On Session End
During the PAM session, the passwords used to log in to the target servers will be changed when the PAM session ends (log out from CA PAM GUI).
This is not effective for the passwords 'Viewed' in the CA PAM GUI on session terminations.