-
Title
What steps are required to upgrade from Authentication Services 4.x to Safeguard Authentication Services 5.0 - Version 4 to 5 License. -
Description
NOTE: A new license must be obtained and installed before upgrading to Safeguard Authentication Services before joining or upgrading clients to Safeguard Authentication Services 5.0
NOTE: This does not apply to SAP GUI configurations. There is no license change.
-
Cause
Safeguard Authentication Services requires a new license to properly function. -
Resolution
RESOLUTION:
To install and prepare the 5.0 license before upgrading clients please adhere to the following steps.
1. Request your new 5.0 license, that can be done here
2. Ensure that you have Control Center 4.2.4 (or higher) installed on a Windows Desktop or Windows Server joined to the same domain as your Linux and Unix clients.
3. Install the license in 4.2.4 (or higher) Control Center. You can download 4.2.4 here.
4. To upgrade Control Center after unzipping the package you need to browse to the Windows folder and run setup.exe. It might require a reboot of the system.
5. Open Control Center. In the left hand column click Preferences. Then expand the Licensing section at the top if it isn't already.
6. Click Add a license.
The license should now be properly installed and show Product Version 5.
Systems that are joined or upgraded will automatically pick up Version 5 licenses. Older licenses will be ignored.
Not all Linux and Unix machines need to be upgraded at the same time. For instructions on upgrading please see this article
Please note: Newer versions of Control Center starting in 4.2.0 and above include support for Starling Two Factor Authentication.To support Starling 2FA, two new attributes are included in the Q.A.C. (Authentication Configuration) and must be populated. Once the upgrade is complete, open the Control Center, locate the section for Schema (under Preferences | Schema Attributes). Ensure the values are set appropriately.If altsecurityidentities are shown, then the new values likely need to be set.
RESOLUTION 2:
How to install a license using the vastool command line interface.
This method requires permissions to read, write and create child objects on the License container in Active Directory. By default this is located in the following DN path.
CN=Licenses,CN={786E0064-A470-46B9-83FB-C7539C9FA27C},CN=Authentication Services,CN=Quest Software,CN=Program Data,DC=DOMAIN,DC=LAB
Step 1. Upgrade or install Safeguard Authentication Services 5.0.5 or later on a non-critical server.
Step 2. Join to the domain where the license will be installed. The missing license will mean that users are unable to authenticate to the server in question until this process is complete.
Step 3. The following command will install the license in the Authentication Configuration in Active Directory.
# /opt/quest/bin/vastool -u administrator license add /path/filename.dlv
This will install the license locally as well.
Step 4. Validate the license works locally with the following commands.
# /opt/quest/bin/vastool license
# /opt/quest/bin/vastool flush
Users should now be able to login.
NOTE: Subsequent joins and upgrades are expected to be licensed normally during that process. Please allow for normal Active Directory replication. Version 4 4 and older licenses will be ignored.