Chat now with support
Chat with Support

Safeguard Authentication Services 5.0.1 - Upgrade Guide

Privileged Access Suite for Unix Introducing One Identity Safeguard Authentication Services Upgrade the web console Upgrade Windows components Configure Active Directory Configure Unix agent components Upgrade client components manually Getting started with Safeguard Authentication Services
Getting acquainted with the Control Center Learning the basics
Troubleshooting

About licenses

Safeguard Authentication Services must be licensed in order for Active Directory users to authenticate on Unix and macOS hosts.

Considerations:

  • New licenses have to be added prior to upgrade.

  • You can install and configure Safeguard Authentication Services on Windows and use the included management tools to Unix-enable users and groups in Active Directory without installing a license. However, you must have a valid Safeguard Authentication Services license installed for full functionality.

  • In order to use Starling Two-Factor Authentication, you must have a valid license for Authentication Services with One Identity Hybrid Subscription included.

To obtain a license, use the Licensing Assistance page on the One Identity support page or contact your account representative.

For more information on installing Authentication Services licenses, see Adding licenses using the Control Center.

System requirements

Prior to installing Safeguard Authentication Services, ensure your system meets the minimum hardware and software requirements for your platform. Safeguard Authentication Services consists of Windows management tools and Unix client agent components.

Related Topics

Windows and cloud requirements

Windows components

Windows permissions

Unix agent requirements

Unix components

Permissions matrix

Encryption types

Management Console for Unix requirements

Windows and cloud requirements

The following are the minimum requirements for using Safeguard Authentication Services in your environment.

Table 1: Authentication Services requirements
System requirements

Supported Windows Platforms

Prerequisite Windows software

If the following prerequisite is missing, the Safeguard Authentication Services installer suspends the installation process to allow you to download the required component. It then continues the install:

  • Microsoft .NET Framework 4.5

You can install Safeguard Authentication Services on 64-bit editions of the following configurations:

  • Windows Server 2008 R2
  • Windows Server 2012
  • Windows Server 2012 R2
  • Windows Server 2016
  • Windows Server 2019

NOTE: Due to tightened security, when running Safeguard Authentication Services Control Center on Windows 2008 R2 (or later) operating system, functioning as a domain controller, the process must be elevated or you must add authenticated users to the Distributed COM Users group on the computer. As a best practice, One Identity does not recommend that you install or run the Safeguard Authentication Services Windows components on Active Directory domain controllers. The recommended configuration is to install the Safeguard Authentication Services Windows components on an administrative workstation.

Supported cloud services
  • AWS Directory Service for Microsoft Active Directory (also called AWS Managed Microsoft AD)

  • Azure Active Directory Domain Services

  • Google Cloud Platform Managed Service for Microsoft Active Directory

Windows components

Safeguard Authentication Services includes the following Windows components.

Table 2: Windows components
Windows component Description

Safeguard Authentication Services Control Center

A single console for access to all of the tools and configuration settings for Safeguard Authentication Services.

Active Directory Users and Computers MMC Snapin Extensions

Unix management extensions for Active Directory users and groups.

Group Policy Management Editor MMC Snapin Extensions

Group Policy extensions for management of Unix, Linux, and macOS.

RFC2307 NIS Map Editor MMC Snapin

Provides the ability to manage NIS data in Active Directory.

NIS Map Import Wizard

Imports NIS data into Active Directory.

Unix Account Import Wizard

Imports Unix identity data into Active Directory.

Safeguard Authentication Services PowerShell cmdlets

Provides the ability to script Unix management tasks.

Documentation

Full product documentation and online help.

Note: The VAS Configuration Utility is no longer included. Instead the Control Center provides access to all preferences and tools. If you were using the custom schema functionality of the VAS Configuration Utility, be sure to configure the same settings in the Control Center under Preferences | Schema Attributes | Custom Unix Attributes.

Any previous version of the Safeguard Authentication ServicesWindows components are automatically uninstalled before the Safeguard Authentication Services 5.0.1 install proceeds.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating