Chatee ahora con Soporte
Chat con el soporte

Active Roles 8.0.1 LTS - How-to Guide

Upgrading from Active Roles 6.9

Upgrading from Active Roles 6.9 to 7.x version is a side-by-side upgrade, which does not interrupt operations or affect the configuration of the currently installed Active Roles version. To ensure smooth upgrade to the new Active Roles version, upgrade the Administration Service first, and then upgrade the Web Interface.

Active Roles 6.9 components are not used in the upgrade and neither are any components from the earlier version uninstalled.

Before upgrading to the latest version of Active Roles, the add-ons of the earlier versions must be uninstalled.

Impact on Office 365 Add-On
  • After an upgrade of Active Roles components to Active Roles 8.0.1, the Office 365 add-on which was supported in the earlier versions of Active Roles, ceases to work. Hence, it is recommended to uninstall the Office 365 add-on prior to the upgrade of Active Roles.
  • Office 365 add-on is not supported on Active Roles 7.3 or later and must be uninstalled prior to the installation of Active Roles 7.1.
  • Active Roles 8.0.1 manages Office 365 and Azure AD natively.

For an upgrade demonstration, please refer to the following knowledge base article:

https://support.oneidentity.com/kb/257995

Prerequisites for upgrade from Active Roles 6.9

Before any upgrade is performed, first consider the following:

  • There is no need to break replication when upgrading to Active Roles 8.0.1 from 6.9 as Active Roles 7.3 or later does not support an in-place upgrade in this scenario. A side-by-side installation of Active Roles must be performed and replication must be configured post installation on the new instance of Active Roles.

    NOTE: During and post-installation of Active Roles 8.0.1, the existing installation of Active Roles 6.9 will be available and fully functional. Hence, users will not be affected during the upgrade process with the exception of Dynamic Groups. For more details please review the knowledge base article, https://support.oneidentity.com/kb/211388.

  • An upgrade of the Active Roles components may affect custom solutions. Custom solutions (such as scripts and other modifications), which work fine as expected with an earlier version of Active Roles may cease to work after the upgrade. Before starting an upgrade, test the existing solutions with the new version of Active Roles in a lab environment to verify that the solutions continue to work as expected after the upgrade.
  • If ERFM (Exchange Resource Forest Management) is installed on the Active Roles 6.9 version, it must be uninstalled before installing 8.0.1 as ERFM is now part of the product. Failure to uninstall ERFM beforehand may result in conflicts and issues.
  • If Lync Add-On is installed, it must be uninstalled before installing Active Roles 8.0.1 as Lync is now an integrated product feature.
  • If Office 365 Add-On is installed, it must be uninstalled before installing Active Roles 8.0.1 as this functionality is replaced with the inbuilt Azure Active Directory Hybrid Integration.
  • For additional information, please review Solution 111679:

    https://support.oneidentity.com/kb/111679

  • Due to the design changes implemented in Active Roles 7.x in the Web Interface, any Web Interfaces and customizations from Active Roles 6.9 may not function in Active Roles 8.0.1. It is recommended not to import. Please refer to KB 189186 for additional information:

    https://support.oneidentity.com/kb/189186

To perform the Upgrade

  1. From the installation media, run ActiveRoles.exe.
  2. Accept the licensing agreement and click Next.
  3. Select the desired components and click Next.
  4. Review the summary and click Install.
  5. By default, the I want to perform configuration option is selected. Click Finish to launch the Configuration Center
  6. In the Configuration Center, under the Administration Service option click Configure.
  7. Select a service account that will run the Active Roles service and click Next.
  8. Choose the appropriate security group that will hold the role of the Active Roles Admin group and click Next.
  9. If this is the first installation of Active Roles, select New Active Roles database and click Next.
  10. Enter the appropriate SQL server, database name and credentials. Click Next.
  11. After completing, click Finish.
  12. In the Configuration Center, under Dashboard click Import Configuration, specify the Source SQL server, database and access credentials, and then click Next.
  13. Click Next.
  14. If the current version of Active Roles service is running, stop it and then click Next to continue.
  15. If you have the encryption key, provide it. If not, select Do not import encrypted data and click Next.
  16. If you do not have the encryption key, you must re-enter the credentials for any Managed Domains, which are not managed by the Active Roles Service account.

    The Add-On Advisor checks if there are any incompatible Add-Ons installed the Wizard will not proceed. Before continuing, uninstall the Add-Ons from the Active Roles 6.9 server.

  1. Click Next.
  2. Once ready, click Import.

 

Importing change history

The Change History from Active Roles 6.9 database is not imported during the initial import, as the Change History may be extremely large and thus would take a long time for the initial Setup to complete. Active Roles provides a separate utility for importing Change History.

  1. In the Active Roles Configuration Center, click Import Management History under Administration Service.
  2. Enter the Active Roles 6.9 source database and appropriate credentials and click Next.
  3. Select the destination database and click Next.
  4. Choose the records to import and click Next.
  5. Confirm the settings and click Import.

    The progress screen is displayed, and after completion, the summary is displayed.

In-place upgrade from Actve Roles 7.x

This section describes the main steps of performing an in-place upgrade from an earlier version of Active Roles 7.x.

Backing up the Active Roles Database

Before upgrading, One Identity recommends backing up the Active Roles database. For more information on general best practices, see Create a Full Database Backup in the Microsoft SQL documentation.

Prerequisites for in-place upgrade from Active Roles 7.x

One Identity recommends backing up the current Web Interfaces if any customizations have been implemented.

Any Web Interface sites that were created in Active Roles 7.2.x will continue to function in 8.0.1. However, it is recommended to thoroughly test before upgrading, as some customizations may not work as expected in newer versions of Active Roles.

To back up the Web Interface Configurations

  1. Launch the Active Roles Configuration Center.

  2. Click Web Interface.

  3. Select the site(s) to backup and click Export Configuration.

To upgrade Active Roles

NOTE: If a limited SQL access account is used for performing the in-place upgrade, a manual action is required to pre-create the new Active Roles databases. For more information, see Knowledge Base Article 4303098 on the One Identity Support Portal.

  1. Run ActiveRoles.exe from the installation media.

  2. Click Next to continue.

  3. Accept the license agreement and click Next.

  4. Review the summary and warning. If the Office 365 Add-On is installed in the 7.0.x instance, uninstall it before continuing.

  5. If the system does not restart, click Update Service Instance in the Configuration Center.

  6. If the system restarts and the Configuration Center does launch automatically, launch the Configuration Center and click Update Service Instance.

    Due to the update of the database schema, the 7.x versions of the Web Interface sites are no longer compatible.

  7. Click Manage Sites under Web Interface in the Configuration Center.

  8. Take note of the current websites and configurations used (For example, ARWebAdmin, using configuration Site for Administrators).

  9. Delete all the sites and click +Create.

  10. Enter the Alias of the site, for example, ARWebAdmin, and click Next.

  11. On the Configuration screen, ensure Create from a template is selected.

  12. Enter a Configuration name, select the original Template to import from (for example, Default site for administrators), then click Create.

  13. Click Finish.

Documentos relacionados

The document was helpful.

Seleccionar calificación

I easily found the information I needed.

Seleccionar calificación