Chatee ahora con Soporte
Chat con el soporte

One Identity Safeguard for Privileged Passwords 6.0.10 LTS - Release Notes

Update and installation instructions

The Safeguard for Privileged Passwords 3000 and 2000 Appliances are built specifically for use only with the Safeguard for Privileged Passwords privileged management software, which is pre-installed and ready for immediate use on the hardened appliances.

Safeguard for Privileged Passwords virtual appliances and cloud applications are also available.

To set up a new deployment: 3000 Appliance, 2000 Appliance, Virtual Machine, or Cloud

If this is a new physical appliance, virtual machine, or cloud deployment, see the Safeguard for Privileged PasswordsAppliance Setup Guide. The guide is also included in the package with a physical appliance.

To update an existing physical appliance or virtual appliance with this patch

It is the responsibility of the Appliance Administrator to upgrade Safeguard for Privileged Passwords by installing an update file (patch). Consider the following:

  • Minimum patch version: 6.0.0.12276. If you are running an earlier version of the Safeguard for Privileged Passwords Appliance, you must upgrade to this version before applying the 6.0.10 LTS patch.
  • Clustered environment: See the Patching cluster members section in the Safeguard for Privileged PasswordsAdministration Guide for instructions on how to deploy a patch so all appliances in the cluster are on the same version.
  • During initial installation and when applying a patch, make sure the desktop client file is the one supplied with the appliance version. If the versions are not compatible, errors will occur. For more information, see To install the desktop client.

Prepare to install a patch

  1. Backup your appliance before you install a patch. Once you install a patch, you cannot uninstall it. See theSafeguard for Privileged PasswordsAdministration Guide, Backup and restore topic.

  2. Download the latest physical appliance patch or virtual appliance patch from the One Identity Support Portal:

    https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/download-new-releases

To install the hardware patch

  1. As an Appliance Administrator, log in to the Safeguard for Privileged Passwords desktop client.
  2. From the Home page, select Administrative Tools.

  3. Select Settings | Appliance | Updates.

    The current appliance and client versions are displayed.

  4. Click Upload a File and browse to select the update file you downloaded from the One Identity support web site.

    When you select a file, Safeguard for Privileged Passwords uploads it to the server, but does not install it.

  5. Once the file has successfully uploaded, click Install Now.

To install the virtual machine patch

  1. Make adequate resources available. The virtual appliances default deploy does not provide adequate resources. The minimum resources required are: 4 CPUs, 10GB RAM, and a 500GB disk. Without adequate disk space, the patch will fail and you will need to expand disk space then re-upload the patch.
  2. Go to the web management console and click Setup and follow the wizard.
To install the desktop client

Be sure to update the desktop client when you apply a new patch. The version of the appliance and desktop client must be compatible.

To define and enforce security policy for your enterprise, install the Windows desktop client application, which gives you access to the Administrative Tools. You install the Windows desktop client by means of an .msi package that can be downloaded from the appliance web client portal. You do not need administrator privileges to install the desktop client.

NOTE: PuTTY is used to launch the SSH client for SSH session requests and is included in the install. The desktop client looks for any user-installed PuTTY in the following locations:

  • Any reference to putty in the PATH environment variable
  • c:/Program Files/Putty
  • c:/Program Files(x86)/Putty
  • c:/Putty

If PuTTY is not found, the desktop client uses the version of PuTTY that it installed at:

<user-home-dir>/AppData/Local/Safeguard/putty.

If the user later installs PuTTY in any of the locations above, the desktop client uses that version which ensures the user has the latest version of PuTTY.

Installing the Safeguard for Privileged Passwords desktop client application

  1. To download the Safeguard for Privileged Passwords desktop client Windows installer .msi file, open a browser and navigate to:

    https://<Appliance IP>/Safeguard.msi

    Save the Safeguard.msi file in a location of your choice.

  2. Run the MSI package.
  3. Select Next in the Welcome dialog.
  4. Accept the End-User License Agreement and select Next.
  5. Select Install to begin the installation.
  6. Select Finish to exit the desktop client setup wizard.
  7. Check your desktop resolution. The desktop client works the best at a resolution of 1024 x 768 or greater.

Installing the Desktop Player

CAUTION: If the Desktop Player is not installed and a user tries to play back a session from the Activity Center, a message like the following will display: No Desktop Player. The Safeguard Desktop Player is not installed. Would you like to install it now? The user will need to click Yes to go to the download page to install the player following step 2 below.

  1. Once the Safeguard for Privileged Passwords installation is complete, go to the Windows Start menu, Safeguard folder, and click Download Safeguard Player to be taken to the One Identity Safeguard for Privileged Sessions - Download Software web page.

  2. Follow the Install Safeguard Desktop Player section of the player user guide found here:

    1. Go to One Identity Safeguard for Privileged Sessions - Technical Documentation.
    2. Scroll to User Guide and click One Identity Safeguard for Privileged Sessions [version] Safeguard Desktop Player User Guide.

  3. For Safeguard Desktop player version 1.8.6 and later, ensure your signed web certificate has a Subject Alternative Name (SAN) that includes each IP address of each of your cluster members. If the settings are not correct, the Safeguard Desktop Player will generate a certificate warning like the following when replaying sessions: Unable to verify SSL certificate. To resolve this issue, import the appropriate certificates including the root CA.

New Desktop Player versions

When you have installed a version of the Safeguard Desktop Player application, you will need to uninstall the previous version to upgrade to a newer player version.

Verify successful installation

You can verify that the correct version has been successfully installed from the Safeguard for Privileged Passwords desktop client or the LCD on the Safeguard for Privileged Passwords Appliance.

To verify the uploaded patch was installed

  1. Log in to the Safeguard for Privileged Passwords desktop client as an Operations Administrator or an Appliance Administrator.
  2. Select Administrative Tools.
  3. Select Settings | Appliance | Appliance Information.
  4. Verify the correct appliance version is displayed in the appliance properties pane.

In addition, when the appliance is running, the LCD home screen on the front panel of the appliance displays Safeguard for Privileged Passwords <version number>. Therefore, you can verify the correct appliance version is running from there, as well.

More resources

Additional information is available from the following:

Globalization

This section contains information about installing and operating this product in non-English configurations, such as those needed by customers outside of North America. This section does not replace the materials about supported platforms and configurations found elsewhere in the product documentation.

This release is Unicode-enabled and supports any character set. It supports simultaneous operation with multilingual data. This release is targeted to support operations in the following regions: North America, Western Europe and Latin America, Central and Eastern Europe, Far-East Asia, Japan. It supports bidirectional writing (Arabic and Hebrew). The release supports Complex Script (Central Asia – India, Thailand).

The release is localized to the following languages: Arabic (Saudi Arabia), Chinese (Traditional), Dutch, French, German, Italian, Japanese, Korean, Russian, Spanish.

Documentos relacionados

The document was helpful.

Seleccionar calificación

I easily found the information I needed.

Seleccionar calificación