When connecting to the CA PAM 3.x a message is returned "Failed to start access agent". The IE web browser session is opened, but no Java applets are loaded. The same message is displayed when using a browser or the PAM Client. The error also occurs when using the PAM client on Windows or MAC. This does not appear to be network related
Last confirmed in CA PAM 3.2
The basic reason for this error message is that the Java components in the CA PAM GUI cannot load. In this particular case it was because there was an error with the custom signing certificate applied to the applets in CA PAM. Since Java could not validate the certificate it could not start the applets.
Ether reset the certificate with an appropriate certificate or simply setting it back to the original (gkcert) Default Applet Certificate and restart the client should resolve this issue.
For more troubleshooting on this topic please try viewing