CAUTION: For customers upgrading to 7.0 from a previous Safeguard for Privileged Passwords release, be aware the following changes are required prior to upgrading: New license. Once the new license is installed, Appliance Administrators will need to read and accept the Software Transaction Agreement before Safeguard for Privileged Passwords will be fully functional. Must apply the OS patch release prior to upgrading to 7.0. For more information, see One Identity Support. Approval Anywhere has been deprecated. Any Safeguard for Privileged Passwords customers also currently using Starling Two-Factor Authentication as their authentication provider should wait to upgrade until they have removed all Starling Two-Factor Authentication related user information.

The Safeguard for Privileged Passwords 4000, 3000 and 2000 Appliances are built specifically for use only with the Safeguard for Privileged Passwords privileged management software, which is pre-installed and ready for immediate use on the hardened appliances.

Safeguard for Privileged Passwords virtual appliances and cloud applications are also available.

To set up a new deployment: 4000 Appliance, 3000 Appliance, 2000 Appliance, Virtual Machine, or Cloud

If this is a new physical appliance, virtual machine, or cloud deployment, see the Safeguard for Privileged Passwords Appliance Setup Guide. The guide is also included in the package with a physical appliance.

To update an existing physical appliance or virtual appliance with this patch

It is the responsibility of the Appliance Administrator to upgrade Safeguard for Privileged Passwords by installing an update file (patch). Consider the following:

• Minimum patch version: 7.0.0.0. If you are running an earlier version of the Safeguard for Privileged Passwords Appliance, you must upgrade to this version before applying the 7.0.4.1 LTS patch.
• Clustered environment: See the Patching cluster members section in the Safeguard for Privileged Passwords Administration Guide for instructions on how to deploy a patch so all appliances in the cluster are on the same version.

Prepare to install a patch

1. Backup your appliance before you install a patch. Once you install a patch, you cannot uninstall it. See the Safeguard for Privileged Passwords Administration Guide, Backup and restore topic.

2. Download the latest physical appliance patch or virtual appliance patch from the One Identity Support Portal:
   https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/download-new-releases

To install the hardware patch

1. As an Appliance Administrator, log in to the Safeguard for Privileged Passwords client.

2. Select Appliance Management > Appliance > Patch Updates.

   The current appliance and client versions are displayed.

3. Click Upload a File and browse to select the update file you downloaded from the One Identity support web site.

   NOTE: When you select a file, Safeguard for Privileged Passwords uploads it to the server, but does not install it.

4. Once the file has successfully uploaded, click Install Now.

To install the virtual machine patch

1. Make adequate resources available. The virtual appliances default deploy does not provide adequate resources. The minimum resources required are: 4 CPUs, 10GB RAM, and a 500GB disk. Without adequate disk space, the patch will fail and you will need to expand disk space then re-upload the patch.
2. Go to the web management console and click Setup and follow the wizard.