CAUTION: For customers upgrading to 7.0 from a previous SPP release, be aware the following changes are required prior to upgrading: New license (https://support.oneidentity.com/contact-us/licensing). Once the new license is installed, Appliance Administrators will need to read and accept the Software Transaction Agreement before SPP will be fully functional. Must apply the OS patch release prior to upgrading to 7.0. For more information, see One Identity Safeguard for Privileged Passwords required Operating System Patch Pre-requisite for SPP 7.0 LTS (338064). Approval Anywhere has been deprecated. Any SPP customers also currently using Starling Two-Factor Authentication as their authentication provider should wait to upgrade until they have removed all Starling Two-Factor Authentication related user information.

The One Identity Safeguard for Privileged Passwords 4000 Appliance, 3000 Appliance and 2000 Appliance are built specifically for use only with the SPP privileged management software, which is pre-installed and ready for immediate use on the hardened appliances.

SPP virtual appliances and cloud applications are also available.

To set up a new deployment: One Identity Safeguard for Privileged Passwords 4000 Appliance, 3000 Appliance and 2000 Appliance Virtual Machine, or Cloud

If this is a new physical appliance, virtual machine, or cloud deployment, see the One Identity Safeguard for Privileged Passwords Appliance Setup Guide. The guide is also included in the package with a physical appliance.

To update an existing physical appliance or virtual appliance with this patch

It is the responsibility of the Appliance Administrator to upgrade One Identity Safeguard for Privileged Passwords by installing an update file (patch). Consider the following:

• Minimum patch version: 7.0.0.18401. If you are running an earlier version of the SPP Appliance, you must upgrade to this version before applying the 7.4.1 patch.
• Clustered environment: See the Patching cluster members section in the One Identity Safeguard for Privileged Passwords Administration Guide for instructions on how to deploy a patch so all appliances in the cluster are on the same version.

Prepare to install a patch

1. Backup your appliance before you install a patch. Once you install a patch, you cannot uninstall it. See the One Identity Safeguard for Privileged Passwords Administration Guide, Backup and restore topic.

2. Download the latest physical appliance patch or virtual appliance patch from the One Identity Support Portal:
   https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/download-new-releases

To install the hardware patch

1. As an Appliance Administrator, log in to the SPP client.

2. Select Appliance Management > Appliance > Patch Updates.

   The current appliance and client versions are displayed.

3. Click Upload a File and browse to select the update file you downloaded from the One Identity support web site.

   NOTE: When you select a file, SPP uploads it to the server, but does not install it.

4. Once the file has successfully uploaded, click Install Now.

To install the virtual machine patch

1. Make adequate resources available. The virtual appliances default deploy does not provide adequate resources. The minimum resources required are: 4 CPUs, 10GB RAM, and a 500GB disk. Without adequate disk space, the patch will fail and you will need to expand disk space then re-upload the patch.
2. Go to the web management console and click Setup and follow the wizard.