When a target account for which a Password view policy is in use which has the check in/check out password option set, any attempt at viewing the password for that account is met with an error "Multiple credentials configured for access, please select one".
I am trying to view the password for an account which has a password view policy to check in and check out the account. However, I am getting the following message:
"Multiple credentials configured for access, please select one"
and a popup similar to the following is showing up
Device Name Account Name Application Name Access Mode
mydevice.ca.com admin Pulse Checked Out
We don't have multiple credentials configured on any device, all have single credential configured. The message is confusing, what does it mean and why does it appear ?
CA PAM 2.8.3/2.8.4
When you configure checkin/checkout the account and this account is using its credentials, then they are locked until the account is checked in again.
A person wanting to view the account password can only do so after the account has been checked in by the current user. While it is checked out, other users using the target cannot view the password nor can they change any aspect of the account. Once the password is checked back in to Credential Manager, others can view it and can update it.
So the message shown on the screen is a bit misleading but it is just listing all the credentials available to access the target machine and, since only one set is available and they are checked out, it is indicating so by presenting a window with just one possible set of credentials and marking them as checked out